Is it possible to create a user in the format of

{email_account@email.domain-{tenant-id}}

and still be able allow sign in via magic link? It seems like the magic link only works when the user in Descope is

{email_account@email.domain}

?

Hey Kyle, in order for magic links to work, the email needs to be a loginId. I guess you have sso users that look like the first annotation and you want to allow them to sign in with magic links also? It’s highly unrecommended - please read : https://docs.descope.com/sso/merging-sso-identities-risk If you still wish to do so, you will need to add the email as a loginId either by flow or by API/SDK. Flows - post SSO action please add the “Update User / Attribute” action and select the loginId field -> Dynamic -> user.email. For SDK - depends on the user lifecycle. If you are creating those users - you can create them with additionalIdentifiers in the create/create batch endpoints. If we are talking about JIT, i would use flows to perform the update.