Provision a new subscription against T-CRM.
ExternalId is generated on submit — admins don't need to pick one.