diff --git a/backend/src/ee/services/scim/scim-service.ts b/backend/src/ee/services/scim/scim-service.ts index ecb900e53..a87d67b94 100644 --- a/backend/src/ee/services/scim/scim-service.ts +++ b/backend/src/ee/services/scim/scim-service.ts @@ -579,6 +579,9 @@ export const scimServiceFactory = ({ }); const serverCfg = await getServerCfg(); + const hasEmailChanged = email?.toLowerCase() !== membership.email; + const defaultEmailVerified = + org.orgAuthMethod === OrgAuthMethod.OIDC ? serverCfg.trustOidcEmails : serverCfg.trustSamlEmails; await userDAL.transaction(async (tx) => { await userAliasDAL.update( { @@ -605,8 +608,7 @@ export const scimServiceFactory = ({ firstName, email: email?.toLowerCase(), lastName, - isEmailVerified: - org.orgAuthMethod === OrgAuthMethod.OIDC ? serverCfg.trustOidcEmails : serverCfg.trustSamlEmails + isEmailVerified: hasEmailChanged ? defaultEmailVerified : undefined }, tx );