XWMS External Login Accounts

How linked OAuth accounts work in XWMS.

External Login Accounts

External login accounts are provider accounts you can use to sign in to XWMS. Supported providers include Google, Microsoft, Discord, GitHub, and Facebook.

How linking works

When a provider account is linked, XWMS signs you in by the provider identity id, not only by email address. This means a linked provider email can be different from your XWMS email and still open the correct XWMS account.

Account unlock is required

Connecting or disconnecting external login accounts requires account unlock. This prevents someone with a temporary session from silently adding or removing login methods.

Good practice

• Keep at least one verified XWMS email login available.
• Remove provider accounts you no longer use.
• Do not share provider credentials with other people.
• If you lose access to a provider, sign in with your XWMS email and remove the old link.