Ok, that should be a decent workaround. What would work better for you in this case - to have a mutation you could call with a Auth0 id_token that always succeeds wether the user exists or not, or to just be able to use the id_token directly in the Authorization header, and Graphcool automatically creates a user if doesn’t exist?