External Identity Lookup
Node Card
Category: Authentication Nodes
Type:
external-identity-lookupTypical position: After identity collection, before the LoginRadius Auth node, when a third-party system must confirm the user exists first.
Properties
Outputs & Errors
| Property | Type | Required | Description |
|---|---|---|---|
| Auth URL | text | Yes | URL of the external identity endpoint. |
| Authentication Type | select | Yes | Authentication method for the outbound request: Basic Auth, Bearer Token, or No Authentication. |
| Username | text | If Basic Auth | Username credential for Basic Auth. |
| Password | text | If Basic Auth | Password credential for Basic Auth. |
| Bearer Token | text | If Bearer Token | Bearer token value sent in the Authorization header. |
| HTTP Method | select | Yes | HTTP verb for the request: GET or POST. |
| Body Type | radio | If POST | Format of the request body: JSON or X-WWW-form-urlencoded. |
| Body | textarea | If POST | Request body content, formatted according to the selected Body Type. |
| Request Headers | keyval pairs | No | Additional HTTP headers to include in the request. |
| Request Query Params | keyval pairs | No | Query parameters to append to the Auth URL. |
| Error Handling | custommultiselect | No | Error handling for each selected error code. Setting a custom message activates that error code as a named output edge on the canvas. |
note
Never hard-code credentials directly in flow properties. Use environment-level secrets management or a secure vault integration where possible.
| Output / Code | Condition | Default message |
|---|---|---|
true | External identity endpoint confirmed the user exists | NA |
false | Lookup failed (catch-all for unhandled errors) | NA |
4083 | The Auth URL could not be parsed | Failed to parse external identity URL |
tip
Error edges only appear on the canvas when you explicitly select them in the Error Handling property. An unselected error code falls through to the false output.
Common Next Nodes
External Identity Lookup (true)→MFA Configured Statecontinue to MFA challenge
External Identity Lookup (true)→Success Finalproceed directly on successful external lookup
External Identity Lookup (false)→Failure Finaluser not found in external system
Usage Notes
External Identity Lookup makes an outbound HTTP call to a third-party identity system and interprets the response to determine whether the user should be allowed to proceed. A 2xx response routes to true; any other response routes to false (or a configured error edge). Use this node for migration flows or hybrid identity architectures where the authoritative user store is outside LoginRadius.