...

The CoreOne Authentication User can have multiple references to the external users from external identity providers, also known as federation or brokering. He has the option to merge those accounts manually and automatically to a local account. Both processes are described here.

Auto Merging / Auto Registration

Whenever a user authenticates with an external identity provider and the authentication results in a user that is nor yet linked to any CoreOne Authentication User, the system either tries to auto merge it or, if no user can be determinated, renders the registration form.

...

In the CoreOne Self-Service Portal the user has the option to merge his CoreOne Authentication Service User to any configured external identity provider. By selecting the provider and authenticating against it, the external identity provider and it’s user will be merged to the current user.

Supported Protocols

Federation / Brokering is possible with both OIDC and SAML.