Hi @david, I’ve tried to implement a backend solution but when I call https://example.com/users/by-external/{EXTERNAL_USER_ID}.json?api_key={DISCOURSE_API_KEY}&api_username=system, the response i get is the html for the sign in page (I’m guessing it’s redirecting there). I have login required enabled and when I disable it, I get the correct JSON response. I want to keep that setting enabled - any ideas what’s going on?