Handling Duplicate People

[mlisle]

Here's a scenario:

1. A year ago, Yakut signed up for a blockcert using [email protected]
2. Today, she signed up for a different blockcert using [email protected]
3. The admin app kicked off a new email to her, assuming this was a different person.

I don't know the answer to this problem, but it's going to happen alot. Is there a way for us to avoid duplicate records for the same person?

[stuartf]

I don't think we can. We can somewhat avoid it by using csv upload and/or #25. Additionally going through the add issuer workflow again shouldn't break anything. We could maybe do something where the user can merge their own accounts by clicking a link in each, but that seems like a pain.

[eareese]

Agreed, I don't think we can prevent this without using something like CAS as an external source of truth. The closest thing I can think of would be to collect and verify user phone numbers, but that would have its own downsides/edge cases.