...
She makes contact with Bob and, using Bob’s mobile device camera and the picture from Unapproved Claims > ReadID (NO PHOTO YET!!!), verifies that the picture from his identity document does, in fact, correspond with the living Bob (FaceMatch), checks if the document is valid, and confirm the claim by clicking on "approve". Since access to stored climate documents is subject to very strict checks (to prevent rogue history revisionists) she checks Bob’s ORCID ID (ORCIDProof) via the ORCID API (AttribRelease) integrated into the admin portal using Unapproved Claims > ReadID by following the link to the ORCID page on Bob (we also need a new tab link such as https://orcid.org/0000-0002-5614-3516) confirms that he has a convincing academic record in the field, in line with the MCAS Admittance Policy, by clicking on "approve". by asking Bob to produce a reference from an esteemed colleague (ProvideRef) and verifying that this colleague is indeed on the list of validated reference providers (CheckRef) (if Bob had not been able to do this Alice would follow normal procedure and request such a reference (RequestRef)) and attests that Bob’s data is correct within the admin portal (SetAttribMediator) and that he meets admittance criteria.
...
The IdP used by the MCAS portal can confirm Bob's identity and that he is entitled to access the MCAC API by invoking (JSON query with <USER ID> placeholder) https://app.incubator.geant.org/rest.php?id=<USER ID>, e.g. https://app.incubator.geant.org/rest.php?id=1.