Add a new Enrollment Flow configuration enabling search of Org Identity Sources during Enrollment. For self signup enrollments, there would need to be either an email confirmation or authentication step to confirm the identity.