Thank you for the response @john.gateley,
Yes I understand the id’s and we’ll probably add the extension. Unfortunately the extension is only useful if emails match. Which I have found in many cases they do not. From what I have seen from our users, it is very common to have different email addresses between social media platforms.
So what I am gathering here is there is no way to keep a new social media identity login from creating a new Auth0 user identity on first login.
The preferred goal is that it is only added if the user is creating an account into our platform, not simply trying to login. This has created confusing with our users.
Perhaps we shot ourselves in the foot a bit by allowing someone to have basic access to our site without having an actual profile, which means we only know about them through the JWT data. These seemed like an okay approach assuming that person had to explicitly create a user identity in Auth0. So I am guessing at this point that there is no way for us to keep a new social identity provider login from creating a new Auth0 user identity?
We really thought there would be an explicit create path and explicit login path with the Auth0 form.