Ah yes, we discussed that further in PM. That was down to SSO not verifying the emails before passing them to Discourse.