Feature #17772

Updated by Peter Amstutz 4 months ago

We should prefer to use the "sub" claim to identify users (this is the way OIDC is _supposed_ to work), and only identify users by "email" as an optional backup strategy

Back