OCPBUGS-32090: Re-add docs about LookupMappingMethod

Author: abrennan89

_unused_topics/identity-provider-provisioning-user-lookup-mapping.adoc

@@ -78,3 +78,10 @@ include::modules/authentication-remove-kubeadmin.adoc[leveloffset=+1]
 include::modules/identity-provider-parameters.adoc[leveloffset=+1]
 
 include::modules/identity-provider-default-CR.adoc[leveloffset=+1]
+
+include::modules/identity-provider-provisioning-user-lookup-mapping.adoc[leveloffset=+1]
+
+[role="_additional-resources"]
+.Additional resources
+* link:https://access.redhat.com/solutions/6006921[How to create user, identity and map user and identity in LDAP authentication for `mappingMethod` as `lookup` inside the OAuth manifest]
+* link:https://access.redhat.com/solutions/7072510[How to create user, identity and map user and identity in OIDC authentication for `mappingMethod` as `lookup`]

authentication/understanding-identity-provider.adoc

@@ -0,0 +1,37 @@
+// Module included in the following assemblies:
+//
+// * authentication/understanding-identity-provider.adoc
+
+[id="identity-provider-provisioning-user-lookup-mapping_{context}"]
+= Manually provisioning a user when using the lookup mapping method
+
+Typically, identities are automatically mapped to users during login. The `lookup` mapping method disables this automatic mapping, which requires you to provision users manually. If you are using the `lookup` mapping method, use the following procedure for each user after configuring the identity provider.
+
+.Prerequisites
+
+* You have installed the {oc-first}.
+
+.Procedure
+
+. Create an {product-title} user:
++
+[source,terminal]
+----
+$ oc create user <username>
+----
+
+. Create an {product-title} identity:
++
+[source,terminal]
+----
+$ oc create identity <identity_provider>:<identity_provider_user_id>
+----
++
+Where `<identity_provider_user_id>` is a name that uniquely represents the user in the identity provider.
+
+. Create a user identity mapping for the created user and identity:
++
+[source,terminal]
+----
+$ oc create useridentitymapping <identity_provider>:<identity_provider_user_id> <username>
+----