Identity provider account confirmation occurs when the confirmIdentityProviderAttributes
property in the login sign-on action is set to true
. If the flow does not find a linked user with PingOne authorization authority linked to the external account, the flow transitions to the ACCOUNT_CONFIRMATION_REQUIRED
flow state and redirects the browser to a form to confirm or update values for attributes mapped from the identity provider. After confirmation or update, the flow calls the user.confirm
action to search for users with PingOne authentication authority based on mapped unique attributes. If matches are found, the flow transitions to the ACCOUNT_LINKING_REQUIRED
flow state and redirects the browser to a form to select the matching user account. The flow updates the user account and completes.