# Discourse doesn't re-verify an address changed by SSO

**URL:** https://meta.discourse.org/t/discourse-doesnt-re-verify-an-address-changed-by-sso/30887
**Category:** Bug
**Tags:** sso, discourseconnect
**Created:** [2015年七月8日 09:52 UTC](https://meta.discourse.org/t/discourse-doesnt-re-verify-an-address-changed-by-sso/30887 "2015-07-08T09:52:08Z")
**Posts on this page:** 1
**Showing post:** 16

<div class="post-metadata">

### Author: ![DeanMarkTaylor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/deanmarktaylor/32/102462_2.png) [@DeanMarkTaylor](https://meta.discourse.org/u/DeanMarkTaylor)
#### Post date: [2017年四月28日 02:00 UTC](https://meta.discourse.org/t/discourse-doesnt-re-verify-an-address-changed-by-sso/30887/16 "2017-04-28T02:00:44Z")

</div>

> [@sascha](#):
>
> Change the email address to some other existing user, sign on using SSO, it will update the external\_id of that user.

> [@sascha](#):
>
> Change the email address back, now the external\_email of that user is updated as well.

This goes against the requirements set out in the SSO topic:

> [@Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso)](https://meta.discourse.org/t/setup-discourseconnect-official-single-sign-on-for-discourse-sso/13045/1):
>
> external\_id is any string unique to the user **that will never change** , even if their email, name, etc change. The suggested value is your database’s ‘id’ row number.

---

_[View the full topic](https://meta.discourse.org/t/discourse-doesnt-re-verify-an-address-changed-by-sso/30887)._