5f7a14fde8cdb24b01fc0e5eadba145bfd9ecb04
max
  Sat Jul 25 23:16:06 2026 -0700
hgLogin: social login (Google/ORCID), email login link, change email. refs #37929

diff --git src/hg/hgLogin/gbMemberIdentity.sql src/hg/hgLogin/gbMemberIdentity.sql
new file mode 100644
index 00000000000..393a2dddfdf
--- /dev/null
+++ src/hg/hgLogin/gbMemberIdentity.sql
@@ -0,0 +1,16 @@
+# gbMemberIdentity - links a gbMembers account to one or more external OAuth/OpenID
+# identities (Google, ORCID).  A single gbMembers account may have several rows here
+# (e.g. one Google and one ORCID).  Created automatically at runtime by hgLogin; this
+# file is kept for reference and manual setup.
+
+CREATE TABLE gbMemberIdentity (
+    idx int unsigned NOT NULL,			# gbMembers.idx of the linked account
+    provider varchar(16) NOT NULL,		# Identity provider: 'google' or 'orcid'
+    subject varchar(255) NOT NULL,		# Stable unique subject id from the provider
+    email varchar(255) NOT NULL default '',	# Email reported by provider at last login
+    created DATETIME NOT NULL,			# Date this identity link was created
+    lastUse DATETIME NOT NULL,			# Date this identity was last used to log in
+		#Indices
+    UNIQUE KEY provSub (provider, subject),
+    INDEX(idx)
+);