What I’ve learned is that when the user lands on the redirect page, although they don’t yet have a session in the application layer, they are logged into your Auth0 tenant. This means that you can perform silent authentication to get the user’s Auth0 ID.
Alternatively, you can use a post-user registration action to update your system with the Auth0 user ID/email: