[FIX] SSO allow public external accounts

- e.g. Google or Facebook