Add user wildcard matching for external auth