Hello,
this feature request came up because we are generating usernames through IdP mappers in the background and therefore want to hide the username and email attributes, so they can't be modified by the user.

The idea here is to provide a "Enabled with scope" option as it is already the case with other attributes.

Any feedback is greatly appreciated !