...
Excluding user credentials and user attribute data more generally, there is one exceptional case of data that may be managed by the IdP but is not managed by the unified StorageService API discussed above. By default, the strategy used to generate "peristentpersistent", pair-wise identifiers for use in SAML assertions is based on salted hashing of a user attribute, and does not store any data.
...