Comment by tshaddox

> There is a simple explanation here: Your staff SWE is wrong. `sub` is the claim you're looking for.

Or perhaps it's actually happening 0.4% of the time. Maybe a few companies have some weird process that results in them routinely deleting accounts and creating new ones on the same email address.