Given the enrollment flow where a OIS record is used to create a verified OrgIdentity and the enrollment attributes request an email address of the user, the system should automatically set the verified status of that additional email address if it matches the already verified address from linked OIds.

Ideally, email address verification should directly verify all email addresses with the same content but attached to different types or OrgIdentity/CoPerson records, but in those cases the user explicitely enters the same address multiple times.

However, in the case of enrollment, when an email address is requested of the user, chances are high they will enter an email address which is linked to the OrgIdentity and might already be considered verified.