Use the deleteRequest operation to remove all data associated with a user from the central store.
<deleteRequest requestID="RA-generated-ID" executionMode="synchronous">
Syntax for Return Values (deleteResponse)
<deleteResponse status="success" requestID="RA-generated-ID">
You may choose to completely remove data associated with specific
users when they leave the enterprise. Also, if users forget
critical information and are unable to access their credentials,
you may choose to reset their Single Sign-on state so they can
start over (see resetRequest).
These two scenarios, complete removal of data and data reset, need
to be differentiated because the Single Sign-on Plug-in behaves differently
in each case. Depending on administrator settings, there may be a
local copy of the user's Single Sign-on data in the user's
profile. If there is no data for the user in the central store, the
plug-in runs a registration wizard and copies the user's
local data to the central store.
In the reset user scenario, the plug-in software discards the local
data then runs the registration wizard.