During OpenID Connect login, the Login endpoint code should lookup existing foaf:Agent instances by email, and reuse it if a match is found.
This should allow disabling TLS client auth by default (getting rid of the browser prompt) and match the apps owner's foaf:Agent instance to its UserAccount created from the Google's account metadata.
During OpenID Connect login, the
Loginendpoint code should lookup existingfoaf:Agentinstances by email, and reuse it if a match is found. This should allow disabling TLS client auth by default (getting rid of the browser prompt) and match the apps owner'sfoaf:Agentinstance to itsUserAccountcreated from the Google's account metadata.