Project

General

Profile

Feature #17772

Updated by Peter Amstutz over 3 years ago

We should prefer to use the "sub" claim to identify users (this is the way OIDC is _supposed_ to work), and only identify users by "email" as an optional backup strategy. 
 strategy

Back