As part of implementing T179463, I propose separating the code from Striker that allows you to create an LDAP account from a Wikimedia SUL account into a separate application. This would allow other services that use LDAP (such as Gerrit) to use the same workflow for creating LDAP accounts from SUL accounts. I would imagine the flow working a lot like Google's authentication system, where you are taken from an application to the central authentication portal and then back to the application.