concept
Scoped IDs
Understand why every service receives a different identifier and how that protects users from cross-service correlation.
Properties
A scoped ID is stable for one service and one U-net holder, but different across services. That lets a service maintain an account without receiving the user's global app identity.
- Good for account lookup in a single service.
- Not useful for tracking a user across unrelated services.
- Revocation and permissions stay under holder control in the U-net app.