Could you implement Single Sign On and make your other app the source of logins?
There is a specific sso setting sso overrides email that does what you are trying to accomplish. If you have sso setup you can then use the sync_sso endpoint and pass in the new email address.