To clarify, the rule will link accounts during the session in which the user is logging in/signing up via the social IDP for the first time, it can’t link the social identity until a sign up/login action from the user makes it aware of the social identity. After that rule has run the user will have a primary profile (probably from a database connection) and a secondary profile (from the social IDP).
In terms of the email verification block at the top, you can actually comment it out/remove it if it isn’t a requirement for you. This rule is set up to work for several connection types and in some instances it might be valuable to confirm that the user has verified their email address, but it isn’t integral to the account linking process itself.
I hope this helps and please let me know if you have any follow up questions!
Thanks,
Matt