Identity provider account confirmation occurs when the
confirmIdentityProviderAttributes property in the login sign-on action is set to
true. If the flow does not find a linked user with PingOne authorization authority linked to the external account, the flow transitions to the
ACCOUNT_CONFIRMATION_REQUIRED flow state and redirects the browser to a form to confirm or update values for attributes mapped from the identity provider. After confirmation or update, the flow calls the
user.confirm action to search for users with PingOne authentication authority based on mapped unique attributes. If matches are found, the flow transitions to the
ACCOUNT_LINKING_REQUIRED flow state and redirects the browser to a form to select the matching user account. The flow updates the user account and completes.