• Using Ory admin API, our invite-only app will pre-register an identity with OIDC config using a 'sub' and 'provider' to skip the linking process and the need for an Ory password. However, the 'sub' value can vary depending on the external IDP, and finding it is not always obvious (such as in okta). It will require extra actions to find or configure the 'sub' from the external IDP. If Ory can optionally link based on 'email' it could greatly simplify our process of inviting and onboarding new users by email only.