Comment by scarface_74

4 days ago

My brokerage account could be accessed by both. I agree that is how it should work. But my brokerage account provider is never told to disable access via my IdP. It’s up to my former IdP to not do something stupid like giving someone else my old email address.

It's not IdP's responsibility to "fix" the internet.

Just like someone can buy a home and will get mail targeting a previous owner, the same happens with domain names and emails.

Domains are, however, much cheaper and more abundant, so it happens more often.