Unlinking organizational identities leaves behind identifiers

Unlinking an organizational identity leaves behind attributes populated via an org identity source.

• CO person attributes that are created via an EnvSource OIS attached to an account linking enrollment flow are displayed with an 'EnvSource' label in the UI
• Unlinking the OI (via the 'Unlink item in the gear menu next to the OI), removes the OI from the user page, but the attributes all still have the 'EnvSource' label
• Attributes in this state can't be deleted. There is only a 'View' item in the gear menu
• Once the unlinked OI is deleted, the EnvSource label is no longer displayed next to the attributes (though the attributes remain)
• Once the OI is deleted, the gear icon menu for the attributes contains 'Edit' and 'Delete', and they can be successfully deleted.

From conversations with Benn, I believe the intended behavior is to remove the attributes/identifiers created via the OIS, once the parent OI is unlinked. At the very least, the attributes/identifiers should be delete-able once the parent OI is unlinked.

I'll attach some redacted images that show a user with:

• Two OIs, and associated EnvSource derived attributes (original state)
• One OI with the EnvSource labels intact (post OI unlinking)
• One OI and no EnvSource labels (post OI deletion)