https://s2-labs.com/admin-tutorials/external-id-record-id-security-token/