They are separate values in IMS, though most organizations have them set as the same value. Updating the email address is possible for admins and co-admins currently, but it must be done via the bulk update tool.
NOTE: Special considerations must be reviewed if the organization is federated - if the identifying attribute is set to use the email address, and email address attribute is set to "A" in your IdP, and you change a user's email address on their profile to "B", a duplicate will be created the next time that user logs in, because JIT provisioning will see there is no user with an email attribute of "A" and create a new, duplicate user, without the permissions and roles of the original user.
They are separate values in IMS, though most organizations have them set as the same value. Updating the email address is possible for admins and co-admins currently, but it must be done via the bulk update tool.
NOTE: Special considerations must be reviewed if the organization is federated - if the identifying attribute is set to use the email address, and email address attribute is set to "A" in your IdP, and you change a user's email address on their profile to "B", a duplicate will be created the next time that user logs in, because JIT provisioning will see there is no user with an email attribute of "A" and create a new, duplicate user, without the permissions and roles of the original user.