Previously we were only updating group membership when a user record was first created in an SSO setting. This corrects it so we also update it if SSO changes the email