Currently, when username/password authentication is enabled, the public user registration (sign-up) form is automatically available. This allows any visitor to create an account on the platform without administrative approval.

There should be an administrative setting to disable this public self-service registration. This feature is crucial for instances of the application where user access must be strictly controlled.

• Security: It prevents the creation of unauthorized or spam accounts.
• User Management: For many organizations, user creation is a deliberate, managed process. Administrators need to be the sole gatekeepers for adding new users to the system.