Hovering my cursor over the button labeled "I think that went well" on this event to see the tooltip:
• -100 Military Power
• Stability -1
• You can now use the Occupation With Lethal Force interaction on your own cities
• Morale -20%
• Loyalty of Generals -50%
• Chance of Military Coup +5%

I'd say screenshot it, maybe obscure the username? If posts are public so the person in question could see it just by logging out, then the block feature's purpose is to avoid interaction, not conceal posts.

Exhorting my companions to avert their gaze for their own safety's sake whilst I perform my terrible incantations so they don't see the bit in the middle where I have to wave my hands at shoulder level and the collar of my mantle ends up somewhere around my eyebrows.

For context I've worked on B2B systems. Each time I've implemented SAML for SSO, we use the IdP the Response came from to match the customer org, the data in the assertion to match with an existing user in that org (in our system), and our internal user roles to determine the in-app permissions.

Just tracked down and watched the talk! It's surprising to me that it seems there's an ecosystem where people are using SAML for authorization instead of just authentication. Do educational (or other) institutions operating SAML IdPs generally expect vendors to accept permissions claims?