Some users are reporting when they log on with SSO, they get an error: “The change you wanted was rejected.”. I have auth_overrides_email set, as well as name, username, and avatar. I suspect the rejected change is for one of those, but I’m having a hard time finding useful info in the logs. I’ve looked at /logs- sometimes there is a “Primary email is already taken”, but I can’t find why Discourse is apparently trying to create a new user instead of authorizing the user with that email. I’ve also grepped in /var/discourse/shared/standalone/log/rails, but didn’t find anything enlightening.