Change email for SSO user?

Curiously, you can’t do this where you’d expect the admin for the user to be:

/admin/users/{user}

But you can do it at:

/users/{user}/preferences

In the UI, you can get here by viewing the user’s public profile, then choosing Preferences, and then the email address has an edit pencil next to it.