Shibboleth/ Verification token was created and persisted to the DB before the email was sent

[milanmajchrak]

This causes the user not to receive the email with the verification link, but they can still sign in on the second attempt because they are identified based on the verification token. The NetID is linked to the verification token.