Unverified50% confidenceFactExact time
When logging in with OIDC, the user is redirected to the IdP for verification, and upon success the IdP issues an ID Token containing user information to the application, so the application does not need to store passwords itself.
1
Sources
50%
Confidence
Long-term
Relevance
9/30/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedDuring reconciliation, the unique user identifier should use the IdP-side id as the primary key rather than userName or email, because the latter may change due to rename operations.72% similarUnverifiedomp 复用 Cursor 官方 IDE 的认证凭据（CURSOR_ACCESS_TOKEN），该 token 的 scope 为特定官方客户端设计，用于非官方工具可能违反预期使用场景并触发 token 吊销或账号封禁69% similarUnverifiedNot all identity directories proactively send deprovisioning events; some IdPs do not send a separate user-level deprovisioning request when a user is removed from a group or has their application assignment revoked.64% similarUnverifiedIn EMA scenarios, account linking should rely on signed assertions issued by the enterprise IdP rather than manual user confirmation—this is one resolution pattern.64% similarUnverified托管身份（Managed Identity）是Azure平台为运行在其上的服务自动颁发和轮换凭据的机制，凭据从不以明文形式出现在代码或配置文件中64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/961589API
curl https://kongchang.com/api/v1/knowledge/claims/961589MCP
get_claim(id=961589)