User aliases need to be managable via a remote API.
This remote API should, at a minimum, allow:
- Query for all aliases of a user.
- Find the user with a given alias for a specific application
- Turning a user in directoryA into an alias of a user in directoryB. This is to allow 'claiming' of accounts.