So the use case is that I’m using Ash authentication and for 95% of users they will have to log in with my custom strategy that we built that is hooking up Swedish Bank ID. But we know that there could be a few users that do not have such a Swedish bank ID, and we need to be able to provide them with an alternative way to log in and we’re gonna use password.

But we would like to have some way of preventing users who have a bank ID to login with the password (Yes, you could argue that it’s stupid to prevent users from using multiple different authentication methods, but that is the requirement).

Is there some way to enforce this behavior to have it stored in the user table or somewhere like that, which users are allowed to use which login methods?