Health Care Worker @Home

We currently have admin, doctor, nurse (and some others), the login should work like that:

• User opens interface (patient = nurse / admin = admin / doctor = doctor).
• User is redirected to openid with interface used sent to backend (nurse / admin / doctor).
• User login and is redirected back to the interface he opens.

In the event of user has no appropriate account in the interface he tries to login:

• user from doctor interface : auto-create user.
• user from admin interface: return 403 error.
• user from nurse interface: return 403 error.

There are specific situation:

• admin can login into nurse and doctor interface as well.

Others situations, the backend must returns 403 error.