Email address verification should be disabled while using only OpenID Connect

[yogeshbeniwal]

trafficstars

Expected behavior: While using external OpenID Connect/SSO as only authentication method, email verification should not be required. As email verification is handled by external authentication provider.

Actual behavior: Currently email verification notification is still shown on user profile, though user has verified email on external authentication provider.

[patrickdung]

I think it needs to check the 'email_verified' claim, because an account exists (email claim) in external provider may not imply it is verified at that end. Reference URL

[tessalt]

Hi there, improving the OIDC flow in several ways is in our current backlog, but we don't have a timeline for implementing these improvements yet.