I think the logic is to differentiate the "identity" from a "user" One identity can have multiple users (one for each organization) At the same time, a user ca

I think the logic is to differentiate the "identity" from a "user" One identity can have multiple users (one for each organization) At the same time, a user can have multiple identities. (e.g. username/password, Google oAuth, SAML etc.)