Issue: user changed google account and can't connect thru his profile

[supermathie (Michael Brown)]

@david

Was there a specific attack vector you were trying to protect against with this error message, or can we go ahead and make it match the other authenticators?

There was, see:

@supermathie

This can happen when

• the user changes their email address then logs in with a new Google account matching their new email
• the user has their Google account recreated (in a managed scenario)
• the user had their Google account deleted, but someone has created a new one matching the previous email address. This scenario does not happen often and could potentially be malicious intent .

Wearing my paranoid hat, I felt it was best to at least make someone look into this situation when it happens.