Not really the case, if you specify that you want to allow SSO to override emails then external_id is treated more strongly than email (meaning email is overridden on change). For all cases of SSO external_id is strongest and always wins. Additionally SSO has the ability of sending in unverified emails.
1 Like