Automatic account linking in Ory allows users to link social sign-in accounts on login automatically using a secure flow. Here's how it works: 1. The user creates an account with an identifier (like an email) and a password. 2. When signing in later, the user clicks to sign in with a social sign-in provider. That social sign-in account contains the same identifier. 3. Since the identifier is already registered, the user cannot be logged in directly. Instead, the user will be prompted to enter the password chosen in step 1. 4. After entering the correct password, the social sign-in is linked to the user's account. Now they can sign in with either password or social sign-in provider. However, automatic account linking can be a security risk. To prevent this, users need to verify an additional credential before the accounts can be linked. For example, in a scenario where a malicious actor tries to link to an existing account, they would be prompted to enter the password associated with the identifier. You can find more details about this process in the [Ory documentation](
https://www.ory.sh/docs/kratos/social-signin/link-multiple-provider-account#automatic-account-linking).