eppn with multiple domains

[Cantor, Scott]

> Is it acceptable to have subdomains used in the EPPN attribute?

Acceptable to whom? Are there SPs that will incorrectly not handle this? Practically would guarantee it. But the scope is whatever you want it to be, and the scopes accepted by somebody are whatever they want them to be.

The problem is what happens when nobody does anything or pays attention, which is likely affecting matters for you.

Could be the metadata issue mentioned, or an issue with the application.

The case of apps that want to equate email with EPPN tend to be the same cases that you run into trouble using multiple scopes. They want one scope representing the enterprise they are doing business with and they want email and they want it all at once.

-- Scott