Find out whether an email address signs in with a password, SSO, or both. An unknown email gets the same answer as a password-only user, so it doesn't reveal whether a password-only account exists. Use this on a sign-in screen to route the user to the right method. When JumpCloud is one of the methods, sso_url is the JumpCloud: start sign-in URL to send the browser to.

Prerequisites: none.

Authentication: Public (no token). Send the email address the user typed.

Rate limit: 10 requests per minute, counted per client IP address.

The count is shared with the other sign-in routes in the same group (login, verify/email/otp); over the limit the API returns 429.