Merge pull request #5037 from AnuradhaSK/shared-user-profile-mgt

Add documentation about shared user profile resolving

en/identity-server/next/docs/guides/organization-management/share-user-profiles.md

@@ -0,0 +1 @@
+{% include "../../../../../includes/guides/organization-management/share-user-profiles.md" %}

en/identity-server/next/mkdocs.yml

@@ -597,15 +597,16 @@ nav:
         - Build self-service capabilities: guides/user-self-service/build-self-service-capabilities.md
       - Organizations:
           - Organizations: guides/organization-management/index.md
+          - Try a B2B use case: guides/organization-management/try-a-b2b-use-case.md
           - Set up organizations: guides/organization-management/manage-organizations.md
-          - Administration of organizations: guides/organization-management/manage-b2b-administration.md
-          - Share applications: guides/organization-management/share-applications.md
+          - Set up administration for organizations: guides/organization-management/manage-b2b-administration.md
+          - Share applications with organizations: guides/organization-management/share-applications.md
           - Onboard admins: 
             - Onboard admins: guides/organization-management/onboard-org-admins/index.md
             - Sales-led approach: guides/organization-management/onboard-org-admins/sales-led-approach.md
             - Self-service approach: guides/organization-management/onboard-org-admins/self-service-approach.md
           - Onboard users: guides/organization-management/onboard-users.md
-          - Try a B2B use case: guides/organization-management/try-a-b2b-use-case.md
+          - Share user profiles with organizations: guides/organization-management/share-user-profiles.md
           - API authorization for organizations: guides/organization-management/api-authorization-for-b2b.md
           - Email domain based organization discovery: guides/organization-management/email-domain-based-organization-discovery.md
       - Customizations:

en/includes/guides/organization-management/onboard-users.md

@@ -2,6 +2,8 @@
 
 Organization administrators can add users to their organization using the following methods.
 
+- Onboard users from
+
 !!! note "Before you begin"
 
     - Make sure you have created an organization in {{product_name}} and onboarded an administrator. See how to [create an organization]({{base_path}}/guides/organization-management/) and [onboard admins]({{base_path}}/guides/organization-management/onboard-org-admins/).

en/includes/guides/organization-management/share-user-profiles.md

@@ -0,0 +1,44 @@
+# Share user profiles with organizations
+
+If your organization users need access to organizations lower in the hierarchy without creating accounts for each and every organization, you can simply share these user profiles with those organizations. This is ideal when a user needs access to multiple organizations while maintaining a single identity. It also reduces the overhead of managing the user's profile across multiple organizations.
+
+## Mathods to share profiles
+
+There are three ways how user profiles are shared between organizations:
+
+1. When a user from the root organization creates one or more organizations and is assigned as the admin, the user profile is automatically shared with those organizations. Learn more about [maintaining organization admins in the root organization]({{base_path}}/guides/organization-management/onboard-org-admins/self-service-approach/#maintain-admins-in-the-root-organization).
+
+2. An organization admin can invite users from the immediate parent organization to join the organization. Once the user accepts the invitation, the user profile is automatically shared with the child organization. Learn more about [inviting existing users from the parent organization]({{base_path}}/guides/organization-management/onboard-users/#invite-existing-users-from-the-parent-organization).
+
+3. An admin can share users of an organization with other organizations lower in the hierarchy using the [User Sharing API]({{base_path}}/apis/organization-user-share-rest-api).
+
+## Customize user attributes in shared user profiles
+
+If your organization has a user whose profile is managed by another organization, the ability to customize this user's attributes depends on the settings of the organization that manages the user's profile.
+
+{{product_name}} offers the **Source for Attribute Value of Shared Users** option, allowing organizations to define how user attributes are resolved in shared user profiles.
+
+<table>
+        <tbody>
+            <tr>
+                <td><b>Source for Attribute Value of Shared Users</b></td>
+                <td><b>Behavior</b></td>
+            </tr>
+            <tr>
+                <td>From Origin</td>
+                <td>The user attribute inherits the value from the organization that manages the user's profile.</td>
+            </tr>
+            <tr>
+                <td>From Shared Profile</td>
+                <td>The organization can customize the user attribute value.</td>
+            </tr>   
+            <tr>
+                <td>From First Found in Hierarchy</td>
+                <td>The user attribute inherits the value from the nearest organization in the hierarchy that has assigned a non-null value to it.</td>
+            </tr>
+        </tbody>
+    </table>
+
+Learn more about attribute configurations in [configure attributes]({{base_path}}/guides/users/attributes/manage-attributes/#configure-attributes).
+
+