How to handle Discourse SSO when the authentication site allows users to change emails?

I’m experiencing this too - did you ever figure out a way around this?