diff --git a/src/api/identity.rs b/src/api/identity.rs
index 23411dc7..68359a94 100644
--- a/src/api/identity.rs
+++ b/src/api/identity.rs
@@ -336,6 +336,13 @@ async fn sso_login(
                     user.name = user_name.clone();
                 }
 
+                user.save(conn).await?;
+            } else if user.verified_at.is_none()
+                && user.email == user_infos.email
+                && user_infos.email_verified.unwrap_or(CONFIG.sso_allow_unknown_email_verification())
+            {
+                // The email verification is handled by the provider, backfill for accounts created before SSO
+                user.verified_at = Some(now);
                 user.save(conn).await?;
             }