Admin/policy question - Shibboleth users with multiple affiliations

[Nate Klingenstein]

> I was just hoping someone had already grappled with this

Yep.

> and come up with a framework.

Not that I'm aware of.  You might hear others chime in, though, particularly virtual organizations like LIGO.

> I like the idea of automating the association where the individual can log
> in to both accounts at once. I hadn't thought of that one.

It works pretty well as long as you a) have control of the app and b) can figure out how to build a comprehensible GUI, which depends mostly on how directly you put the mapping capacity in front of users and how motivated your users are to figure it out.