SCIM: Disable auto assign organization if the user has been provisioned (#101307)

* Add isProvisioned field to model

* Add new isProvisioned column to migration

* Disable auto assignment to organization if the user is provisioned

* add annotation to user model

* add annotation to user models

* Remove IsProvisioned field from Identity

* Move new field assignenment and add default value

* Update annotations for user query results

* Remove isProvisioned from identity

* Add new column to test

* Resolve user from identity at SyncOrgHook

pkg/services/sqlstore/migrations/user_mig.go

@@ -155,6 +155,12 @@ func addUserMigrations(mg *Migrator) {
 		Cols: []string{"uid"}, Type: UniqueIndex,
 	}))
 
+	// Modifies the user table to add a new column is_provisioned to indicate if the user is provisioned
+	// by SCIM or not.
+	mg.AddMigration("Add is_provisioned column to user", NewAddColumnMigration(userV2, &Column{
+		Name: "is_provisioned", Type: DB_Bool, Nullable: false, Default: "0",
+	}))
+
 	// Service accounts login were not unique per org. this migration is part of making it unique per org
 	// to be able to create service accounts that are unique per org
 	mg.AddMigration(usermig.AllowSameLoginCrossOrgs, &usermig.ServiceAccountsSameLoginCrossOrgs{})