We can actually not add manually anymore even for Windows Integrated Authentication as OrigamUser record is needed. (We work around it with a database trigger).
It would be solved automatically if Change BusinessPartner to OrigamUser in model would be solved.