Unless you know that guy working on both API management and the identity provider.

If, hypothetically, someone came to that person with a problem like that, they might do it just for fun. Allegedly.