2 docs tagged with "users"

With UserStorage = None, an SSO or Windows login neither writes user nor token to the database: the user's identity only lives in the cookie and tokens.

Lagoon recommends using policies to express authorizations, based on roles or custom claims (AuthenticationOptions.AccessTokenClaims).