use SSOID to identify account; save SSOID when linking accounts