This is getting too far into the implementation details, IMO.

I'd say something like:

> The username or email entered by the user.
> 
> In many cases, this will be the same as the `login`. However, single sign-on
> systems like LDAP and CAS may have different username requirements than
> GitHub, meaning that the `login` will not work directly for authentication,
> or vice-versa.