If you have many users who fall into a few standard categories you may want to avoid registering them all in the Framework.
Instead you can register one Framework user for each of the standard categories. Let's call these users "typical users". Give each of the typical users the correct authority to Framework objects.
Switch off the Framework web sign on option, and use the server (or HTTP server) to validate the user's password and profile.
After they have signed on, your IIP program can look up which category the user belongs to and change them to their typical user. They will then have the authorities of the typical user.