Table of Contents

TUserLogin Class

Links an external (upstream) identity to a local user.

Remarks

When Sphinx acts as an identity broker, a user authenticates against an external OAuth2/OpenID Connect provider (Google, Microsoft, etc.). This entity persists the durable mapping from that upstream identity -- identified by the provider name and the stable subject (sub claim) -- to the local TUser. It is the recommended way to reconcile external sign-ins, since the subject never changes (unlike the e-mail address). A single local user may have several logins, one per external provider.

Syntax

Unit: Sphinx.Entities

TUserLogin = class(TObject);