diff --git a/packages/core-components/src/layout/SignInPage/LegacyUserIdentity.ts b/packages/core-components/src/layout/SignInPage/LegacyUserIdentity.ts
index ff6d38c860..e28f94072e 100644
--- a/packages/core-components/src/layout/SignInPage/LegacyUserIdentity.ts
+++ b/packages/core-components/src/layout/SignInPage/LegacyUserIdentity.ts
@@ -65,7 +65,7 @@ export class LegacyUserIdentity implements IdentityApi {
     return {
       type: 'user',
       userEntityRef: sub,
-      ownershipEntityRefs: ent ?? [sub],
+      ownershipEntityRefs: ent ?? [],
     };
   }
 
diff --git a/plugins/auth-backend/src/providers/decorateWithIdentity.ts b/plugins/auth-backend/src/providers/decorateWithIdentity.ts
index 76fa97bd81..0e0756f8a8 100644
--- a/plugins/auth-backend/src/providers/decorateWithIdentity.ts
+++ b/plugins/auth-backend/src/providers/decorateWithIdentity.ts
@@ -22,6 +22,8 @@ function parseJwtPayload(token: string) {
 }
 
 /**
+ * @public
+ *
  * Parses token and decorates the BackstageIdentityResponse with identity information sourced from the token
  */
 export function decorateWithIdentity(