What to do with response from Discourse SSO as provider

[Jesper_Enemark]

Hey Sam,
When you say external_id is stable and trustworthy. Do you mean that it is a unique identifier for the user?

Do you want me to make a user in my system based on the user I get returned?

I am getting a querystring returned as I am understanding, and I only check for authentication in the request / response relation event because of my nonce. From here I do not see how I can create a session cookie.

I have followed Arpit’s guide:

Use Discourse as an identity provider (SSO, DiscourseConnect)

So you want to use Discourse as an identity provider for your own web app? Great! Let’s get started. Enable DiscourseConnect provider setting Under Discourse admin site settings (/admin/site_settings) enable setting enable discourse connect provider and add a secret string to discourse connect provider secrets (used to hash SSO payloads). Implement DiscourseConnect in your web app: Generate a random nonce. Let’s call this value NONCE. Save it temporarily so that you can verify it with the …

but it ends with getting the user returned, and not providing further information about what I could do to create a cookie or token.
Is there any documentation providing these informations?

Thank you for the reply, means a ton