It probably makes sense to record the association between an OrcidID and a user id. We should only allow users that don't have an OrcidID yet to create one based on the user's profile information. Once it's created, the association should be recorded and the user should no longer be able to generate a new one.

Please liaise with @simong on what the best approach is towards recording that association