AW: NameID from Subject

[Peter Schober]

* Lukas Hämmerle <lukas.haemmerle at switch.ch> [2014-08-07 16:40]:
> > Not if the user could bail "remove me from this SP" or "have me
> > removed from any SP that asks later" at his IdP. And the back channel
> > should have some mechanism to signal this to the SP (maybe also
> > automatically when a certain identity gets inactive/deleted).
> 
> In this particular case, it would be much easier if the user somehow
> could tell the IdP, "please delete my persistentId for that SP". This
> way, the SP could not make attribute queries anymore.

Only if that also includes "I understand that by doing that I will
lose access to any data I may have stored, or that may be associated
with me, on that SP. Not being able to access that data however does
NOT mean that any of that data will be removed from the SP (or any of
the third parties the SP may have passed it along)."

In ALL CAPS, of course. ;)
-peter