Hi Sam, yeah, for my immediate problem, I’ll just response to the webhook user_logged_in event-- no problem. Thanks for that.
And I understand where you are coming from with regards to what can be passed on SSO. As I continue to deeply integrate Discourse with my site, I’m understanding more about how y’all chose to implement SSO. It works well now, but I actually think it might be interesting to consolidate all the “SSO overrides…” checkboxes into one sort of general checkbox where it’s like “SSO manages all user attributes” (or something like that).
The idea would be that if I turn on this global SSO checkbox, the only thing I have to be consistent with is the external_id: promising Discourse that it will always be unique, always identify the same user and never change. Once that’s in place, I could pass all the fields I wanted with the SSO request and load the user completely from my database.