Secondary Emails with SSO

Curious if anyone has solved this problem? We use SSO and our provider allows for secondary emails. But then if the user logs in with that secondary email, Discourse creates a new account for the user. How can we just update the existing user with the secondary email?