External Logins

MembershipReboot supports associating external accounts with the account managed by MembershipReboot. This allows an alternative for authentication for the user. External logins are defined by the name of the external login provider and the unique identifier for the user provided by the external login provider (the consistency of this unique identifier is crucial). An external login can be associated with the account via the AddOrUpdateLinkedAccount API on the UserAccount. This also accepts a set of claims from the external login provider and these will also be stored with the account data (but separate from the primary claims). An external login can be removed from the account via the RemoveLinkedAccount API on the UserAccount class.

If using the AuthenticationService for authentication in the application, it provides a convenience function called SignInWithLinkedAccount to manage finding the corresponding account based upon the external login provider's information and issuing the authentication cookie for the user.

MembershipReboot has no requirements (beyond the provider identifier and the user identifier from the external provider) on what external login providers are used, and the implementation of using an external login provider is up to the application.