Middleware deprovision does not deprovision user information

[phavekes]

After calling the deprovisioning API

curl -X "DELETE" -u lifecycle:password -H 'Accept: application/json' "https://middleware/deprovision/urn:collab:person:institution.nl:peter12345" -s

The response suggest deprovisioning was handled correctly:

{"name":"OpenConext Stepup","data":[{"name":"Surfnet.Stepup.Identity.Event.IdentityCreatedEvent","value":{"id":"034f55ad-004e-4673-abc3-a3e89576b6b0","institution":"surf.nl","name_id":"urn:collab:person:institution.nl:peter12345","preferred_locale":"nl_NL","common_name":"John Doe","email":"[email protected]"}},{"name":"Surfnet.Stepup.Identity.Event.GssfPossessionProvenEvent","value":{"identity_id":"034f55ad-004e-4673-abc3-a3e89576b6b0","identity_institution":"institution.nl","second_factor_id":"xxxxxxxxx-17bf-4a2f-9dab-d17b8caedecf","stepup_provider":"tiqr","preferred_locale":"nl_NL","common_name":"John Doe","email":"[email protected]","second_factor_identifier":"rod51i-jhpy"}},{"name":"Surfnet.Stepup.Identity.Event.EmailVerifiedEvent","value":{"identity_id":"034f55ad-004e-4673-abc3-a3e89576b6b0","identity_institution":"surf.nl","second_factor_id":"d6993f01-17bf-4a2f-9dab-d17b8caedecf","second_factor_type":"tiqr","registration_requested_at":"2023-01-12T09:03:58+01:00","preferred_locale":"nl_NL","common_name":"John Doe","email":"[email protected]","second_factor_identifier":"rod51i-jhpy"}},{"name":"Surfnet.Stepup.Identity.Event.PhoneRecoveryTokenPossessionProvenEvent","value":{"identity_id":"034f55ad-004e-4673-abc3-a3e89576b6b0","identity_institution":"institution.nl","recovery_token_id":"1857efd9-928c-4113-8a5a-8b64dd250030","preferred_locale":"nl_NL","common_name":"John Doe","email":"[email protected]"}},{"name":"Surfnet.Stepup.Identity.Event.SecondFactorVettedWithoutTokenProofOfPossession","value":{"identity_id":"034f55ad-004e-4673-abc3-a3e89576b6b0","name_id":"urn:collab:person:institution.nl:peter12345","identity_institution":"institution.nl","second_factor_id":"d6993f01-17bf-4a2f-9dab-d17b8caedecf","second_factor_type":"tiqr","preferred_locale":"nl_NL","common_name":"John Doe","email":"[email protected]","second_factor_identifier":"rod51i-jhpy","vetting_type":{"type":"self-asserted-registration","recovery_token_id":"xxxxxxxx-928c-4113-8a5a-8b64dd250030"}}}],"status":"OK"}

But the user data (name and email) stil shows up in the RA portal: