Understanding Facebook authentication record deletion
You can delete Facebook authentication records in Brightspot. The groundwork for this process is laid out when you add a Facebook disconnect endpoint, which is a necessary step of configuring Facebook authentication settings.
Once you slot in the Facebook disconnect endpoint into the Disconnect Endpoint field, Brightspot displays a new note at the top of the content edit page that includes the de-authorize URL and delete URL. Copy and paste these URLs into the login settings in the developer console for your Facebook app.
After this, when a Facebook user removes the connection between their Facebook account and Brightspot, Facebook notifies Brightspot that the login connection was removed, thereby initiating a de-authorization request. This request de-authenticates the user from the front end of your Brightspot site, and the user is logged out. For additional details on how this result is achieved in Facebook, refer to Facebook's documentation on removing apps.
The Facebook user may then additionally send a data deletion request. When this happens, Brightspot deletes all but the Facebook ID of the user who made the request. You can validate this by viewing authentication entities. For details, see Viewing authentication entities.
