Yeah, I’m very confused by this. Why do the users notifying IT have to do the training?

The URL likely is unique per user. They forward it, IT clicks the link, it registers that that user clicked the link even though IT did it.