A GET request will be sent to the Target URL specified.
The cookie header sent by the client to Jenkins will be sent to the Target URL in order to authenticate.
It is expected that an identifying cookie such as a Session ID will be sent that is shared between the two sites.

By default, the server is expected to respond with a JSON response in the following format if the user is authenticated correctly:
{"user_name": "<raw name>", "display_name": "[display name]", "public_email": "[email]"}
The server is expected to return a 200 (OK) status code if the login is successful, and 401 (Unauthorized) otherwise.

Only the user_name key and value are required; the others will be used if available.
The user details sent back from the Target URL will overwrite the user's current settings, to keep them in sync, when the user logs in.