When a user logs into your site for the first time using an external provider (Google or Facebook for example), the Authentication worker checks the email address returned from that provider with those of existing users. If a match is found for an account in this subsite zone, the user may have three options, depending on how you've set things up:
- Link the new login with the existing account
- Log in with a provider already set up for the account
- Create a new account
Login management is handled by the Authentication worker and site templates. See the Linking Providers, Account and Profile Management section of the Authentication worker documentation for more information.
Once logged in users can also manage the login methods associated with their account, adding and removing logins at any time. Note that this does not link accounts together. Login management is about the different ways a user can log into their account, once logged in the actual provider they used to log in with is, for the most part, irrelevant.