Connected Accounts

Main account

Every user can sign in via credentials (username/password), regardless if the initial sign up was with Google or Microsoft. In that case a "No password set yet" message is shown when the user tries to change the password.

Account linking

Users can link multiple OAuth accounts to a single account. For example, they can link their Google or Microsoft accounts to their main account in the security settings.

Security consideration

Account linking should only happen if you can trust that the OAuth provider has verified the email.