I think the sensible solution here is to default the emails_to_use parameter to the full set returned by the IDP, which will be overwritten if the user goes through the pick flow. This aligns up with the expected flow, as this is already the case if the user doesn't go through the consent flow.
We've not got a use for this now, and with OIDC on the way we're not going to have the resources to work on this. If someone wants to pick it up though, be my guest.
Followup from #16317.
I think the sensible solution here is to default the
emails_to_use
parameter to the full set returned by the IDP, which will be overwritten if the user goes through the pick flow. This aligns up with the expected flow, as this is already the case if the user doesn't go through the consent flow.