Hi Vasco,
Have you noticed a difference in the email domain for the email id used on the supplier org vs the supplier users? I guess if the supplier org email domain is same as supplier user email domain then it is auto approved, else would need an explicit approval for the supplier user.
Regards
Vilas