diff --git a/src/application/services/auth_application_service.rs b/src/application/services/auth_application_service.rs
index a7076270..1ba1f762 100644
--- a/src/application/services/auth_application_service.rs
+++ b/src/application/services/auth_application_service.rs
@@ -2774,21 +2774,21 @@ impl AuthApplicationService {
 
         let provider_name = oidc.provider_name().to_string();
         // Check email_verified - only if email is present in claims, and email verification is required.
-        if self.require_verified_email() {
-            if let Some(email) = &claims.email {
-                let verified = claims.email_verified.unwrap_or(false);
-                if !verified {
-                    tracing::warn!(
-                        "OIDC login rejected: email not verified (provider: {}, email: {})",
-                        provider_name,
-                        email
-                    );
-                    return Err(DomainError::new(
-                        ErrorKind::AccessDenied,
-                        "OIDC",
-                        "Email verification required. Please verify your email at the identity provider.",
-                    ));
-                }
+        if self.require_verified_email()
+            && let Some(email) = &claims.email
+        {
+            let verified = claims.email_verified.unwrap_or(false);
+            if !verified {
+                tracing::warn!(
+                    "OIDC login rejected: email not verified (provider: {}, email: {})",
+                    provider_name,
+                    email
+                );
+                return Err(DomainError::new(
+                    ErrorKind::AccessDenied,
+                    "OIDC",
+                    "Email verification required. Please verify your email at the identity provider.",
+                ));
             }
         }