TExternalReconciler Class

Encapsulates Sphinx's built-in policy for reconciling an external (upstream) identity with a local user, driven by TExternalLoginOptions.

Remarks

The policy is intentionally conservative: it always resolves an existing link first (by provider and subject), and only links by e-mail or provisions a new user when explicitly enabled in the options. It performs no event notification by itself; the caller decides when to surface provisioning to the application.

Syntax

Unit: Sphinx.ExternalReconciler

TExternalReconciler = class(TObject);

Methods

Name	Description
FindExisting	Resolves the local user for the external identity without creating a new account: first by an existing link (​provider/​subject)​, then -- when AllowAutoLinkByEmail is enabled -- by linking an existing user matched by (verified) e-mail. Returns nil when no existing user can be resolved.
Provision	Provisions a new local user from the upstream profile and links it to the external identity.
Resolve	Runs the full default policy: FindExisting, then Provision when AllowAutoProvision is enabled. Returns nil when nothing matched and provisioning is disabled.