Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1242821

Description of problem:

The EXTERNAL auth source only gets created when the first user gets auto-created based on external authentication (enabled with --foreman-ipa-authentication=true). That's why the admin will not even see the tab to specify external group mapping when creating/editing user groups.

The EXTERNAL auth source should either be always present, or created when --foreman-ipa-authentication=true is used.

Version-Release number of selected component (if applicable):

How reproducible:

Satellite 6.0 but the same behaviour in 6.1 as well.

Steps to Reproduce:
1. Enable external authentication via IdM using --foreman-ipa-authentication=true.
2. Attempt to define mapping of external groups to Satellite (Foreman) user groups.

Actual results:

Not possible, the tab is there because the EXTERNAL auth source is not there.

Expected results:

It should be possible even before the first externally-authenticated user has logged in / was auto-populated in the user database.

Additional info: