Yes and yes
No, you’ll need to update your DiscourseConnect (formerly ‘Discourse SSO’) provider code.
Please make sure that your provider is indeed verifying user emails before making this change. Otherwise, you could be open to various security issues.