So per the Content DB documentation "User provisioning is done on-demand the first time a user logs in to Oracle Content DB." - assuming your using OID with ContentDB. Does that provisioning only happen when logging through the ContentDB (Web) UI? Or if one programmatically calls RemoteLoginManager.login does the provisioning still occur?
ContentDB Managing Users Page - http://download.oracle.com/docs/cd/B32110_01/content.1013/b32191/users.htm
RemoteLoginManager Javadoc - http://download.oracle.com/docs/cd/B32119_01/doc/contentdb.1012/b31408/toc.htm
Any insight is greatly appreciated. I'm looking to automate provisioning of content DB users into content DB groups and this really complicates that.
RemoteLoginManager.login() will not auto-provision your newly created users. This functionality only works in the in-process code, which is used by the WebUI. You could write a custom EventHandler though to make use of this code or use a script type approach. None of those techniques are published or well documented though.