Onboarding.md

-## User import
-Keycloak has an import feature.
-
-## Manually adding users
-
-Users with special admin rights can add users via the [keycloak console](https://id.fairkom.net/auth/admin/fairlogin/console/). You always should add
-
-- e-mail
-- first name 
-- last name
-
-
-a password can also be set here, this may be set as temporary
-
-the e-mail can be set as confirmed, if we know the user
-
-## Access to services
-Depending on the policy defined, a user may need to be added to a group in Keycloak. E.g. for GroupOffice or fairmeeting pro users.
-
-## Activating users
+## User import
+Keycloak has an import feature.
+
+## Manually adding users
+
+Users with special admin rights can add users. Login as an admin first with the [keycloak master console](https://id.fairkom.net/auth/admin/master/console/).  You then change to the fairlogin realm top left and add a user with
+
+- e-mail
+- first name 
+- last name
+
+a password can also be set here, but better let the user confirm the e-mail and set the pw by him:herself during the first sign-up.
+
+## Access to services
+Depending on the policy defined, a user may need to be added to a group in Keycloak. E.g. for GroupOffice or fairmeeting pro users.
+
+## Activating users
 Depending on the policy at the service connected to fairlogin, you may need to activate the user within the service as an admin of that service after the user has logged in the first time. This is true e.g. for GroupOffice.
\ No newline at end of file