Consider this may be on purpose:

    Not all information requires an identity system to manage
    access. You can protect the privacy of users and reduce
    the security risk to your systems by avoiding any
    unnecessary collection of personally identifiable
    information — this even includes contact details.