Claims & Match
In all cases we require identity provider to return the id_token
.
The returned claim must contain at least:
- User's unique identifier (
sub
) - User's e-mail address (
email
)
By default we request the following scopes openid profile email
.
Match with existing accounts
The e-mail address is a unique identifier for accounts within MyPup. When a user logs in via Signle Sign-On, and the e-mail address is already registered within MyPup, the user will be informed to confirm this SSO login once. An e-mail will be send to the e-mail address. When the user confirms this e-mail, by clicking on a link, the SSO login will be linked to the existing account.