ThinkSubs sign-in fails with “your email address has not been verified”

Reported: members were unable to sign in to ThinkSubs. The login page showed:

Login failed: your email address has not been verified by the identity provider.

Who it affected. Only members whose ThinkSubs account had not yet been linked to their sign-in identity. Anyone who had signed in before was matched on their stored identifier and never reached the failing check, which is why the problem looked intermittent rather than total.

Cause. ThinkSubs asks the sign-in service whether the member's email address is verified, and refuses to link an account unless the answer is an explicit yes. The sign-in service was configured with a profile that reported not verified for everyone, regardless of the account. The credentials, the group memberships and the sign-in service itself were all correct; only that one claim was wrong.

Fix. The sign-in service now reports verified status correctly for ThinkSubs, matching every other service that reads it. No member action is required, and the safety check remains switched on rather than being disabled to work around the problem.

Status: resolved and verified.