diff --git a/CHANGELOG.unreleased.md b/CHANGELOG.unreleased.md
index a49cd46e2..349aff042 100644
--- a/CHANGELOG.unreleased.md
+++ b/CHANGELOG.unreleased.md
@@ -29,6 +29,7 @@
 
 <!--packages-start-->
 
+- xo-server patch
 - xo-server-auth-ldap patch
 - xo-web patch
 
diff --git a/packages/xo-server/src/xo-mixins/authentication.mjs b/packages/xo-server/src/xo-mixins/authentication.mjs
index 7f43e3e69..12c143fcd 100644
--- a/packages/xo-server/src/xo-mixins/authentication.mjs
+++ b/packages/xo-server/src/xo-mixins/authentication.mjs
@@ -113,8 +113,6 @@ export default class {
         //   - `userId`
         //   - optionally `expiration` to indicate when the session is no longer
         //     valid
-        // - an object with a property `username` containing the name
-        //   of the authenticated user
         const result = await provider(credentials, userData)
 
         // No match.
@@ -122,10 +120,10 @@ export default class {
           continue
         }
 
-        const { userId, username, expiration } = result
+        const { userId, expiration } = result
 
         return {
-          user: await (userId !== undefined ? this._app.getUser(userId) : this._app.registerUser(undefined, username)),
+          user: await this._app.getUser(userId),
           expiration,
         }
       } catch (error) {