Comment by anothersullivan

How about an OAuth system where you can add conditions like, the user has validated an address in a certain town, or worked for a certain company? What part of the identity would you scope by?