I believe what you are looking for is:

http-server.authentication.oauth2.principal-field 

Set this to "email" to map the principal to the user's email. You'll also need to add scopes: profile, email