Update / More Info It turns out the user also tagged his Gmail as an approver on a proof, so I'm 99% sure that's what created the External account. When he click the embedded link he gets an error, likely because we're on SSO. Using the /login URL and the "reset password" link he was able to get in ...