Comment 8 for bug 1662250

I guess I was assuming that KARL would have a table that tracks the authentication method for each user. That's usually the workflow with other apps. For example, if I want to log into Box directly from Box (instead of from OKTA), I would select, Use SSO, then enter my email address and then Box redirects me to the correct provider based on my account settings.

Unfortunately, there won't be a single standard for why certain staff have OKTA and why others have Google. For the most part, staff with Entity Open Society Institute will use OKTA, while staff with other entities will use Google, but that isn't always the case. There are a fair number of edge case staff who sit in national foundations, but have full access to OKTA. So we need to build in a some way to accommodate those edge cases.

-Nat