Identity Lookup

Looks up the user's identity in the LoginRadius directory based on the identity attribute provided (email, phone, or username). Used to determine if a user exists before authentication.

Authentication Node

Node Card

Identity Lookup

true

false

Error edges

4007 · 4076

Category: Authentication Nodes

Type: identity-lookup

Typical position: After the Identity input node, before branching into login or registration paths.

---

Properties

Property	Type	Default	Description
Error Handling	custommultiselect	All errors set to automatic	Error handling for each selected error code. Setting a custom message activates that error code as a named output edge on the canvas.

Outputs & Errors

Output / Code	Condition	Default message
true	User found in the LoginRadius directory	NA
false	Lookup failed (catch-all for unhandled errors)	NA
4007	No account found matching the provided identity attribute	User does not exist
4076	Identity attribute found but credentials are invalid	Invalid user ID and/or password

tip

Error edges only appear on the canvas when you explicitly select them in the Error Handling property. An unselected error code falls through to the false output.

---

Common Next Nodes

Identity Lookup (true)→MFA Configured Statealways required before MFA state check

Identity Lookup (true)→Authconfirm user exists before credential check

Identity Lookup (false / 4007)→Create Useruser not found: route to registration

When to Use / When Not To

Use Identity Lookup to branch between login and registration

Place Identity Lookup after the Identity input node. Wire true (user found) to the password collection or Auth step, and false or the 4007 edge (user not found) to a registration flow. This gives you a single email-entry screen that routes users correctly without them needing to know whether they have an account.

Required before MFA Configured State in MFA flows

MFA Configured State reads the session identity context that Identity Lookup populates. Always place Identity Lookup before MFA Configured State: without it, MFA state has no profile to read and the flow will fail.

Using Identity Lookup as a password verifier

Identity Lookup resolves a profile: it does not verify a password or issue any token. It only confirms whether the user exists in the directory. If you need to verify credentials, use the Auth node.

Web Page (Email + Password) → Identity Lookup → Success  (password never checked)

Web Page (Email + Password) → Auth → Success