Admin/policy question - Shibboleth users with multiple affiliations

[David Gersic]

>>> On 9/19/2013 at 01:12 PM, Nate Klingenstein <ndk at internet2.edu> wrote: 

> You can automate the telling if the user is able to authenticate as both 
> accounts at any juncture in time.  Your application can give the user the 
> option to login twice, collate the sessions resulting from these two separate 
> authentications, and retain the association between identifiers from those 
> two logins.

In the case where a person leaves Institution A and moves to Institution B, this would only work so long as Institution  A still allows the person to authenticate. That could stop working at any time, including well before the person could attempt to do this dual login to move their own data to their new identity.