how would we suggest improving the user experience at this SP

[David Bantz]

We have gone to great lengths to make the string in ePPN also be a routable email address
(originally mailAlternateAddress within an LDAP directory used for mail routing by the mail
service,  subsequently pushed as aliases to GAE) but it ain’t simple and requires ongoing 
effort not to “break” as totally separate business processes and governance make changes 
in institutional email services and assigned addresses.

If starting identity management or institutional email from scratch, I would like a policy 
requiring an unchanging identifier that would be used for ePPN and a persistent 
routable email address.  I would also expect a lot of resistance from several quarters
(in principal, because it represents a constraint on their authority for unilateral decisions).

David Bantz

On Wed, 4 Jun 2014, at 10:07 , David Langenberg <davel at uchicago.edu> wrote:

> I wouldn't say eppn == mail, but would suggest that eppn is a routable address for the user. 
> 
> Dave 
> 
> On Wednesday, June 4, 2014, Tom Scavo <trscavo at gmail.com> wrote:
> On Wed, Jun 4, 2014 at 1:40 PM, David Bantz <dabantz at alaska.edu> wrote:
> >
> > On Wed, 4 Jun 2014, at 08:34 , Tom Scavo <trscavo at gmail.com> wrote:
> >
> > We've talked about tagging IdPs with
> > various marks for best practices, but I really think we need a "package"
> > of practices to capture into a mark of some kind.
> >
> > Something like this? https://spaces.internet2.edu/x/x4HYAg
> >
> > which states in part:
> >
> > "Support at least the following user attributes:...mail (== ePPN)"
> >
> > sigh….
> 
> You're the third person to react like that :-) so I may want to modify
> that. The idea is: If you were building your IdM from scratch, it
> would be advisable to define your email addresses and ePPNs to be the
> same. This may be the wrong list but...do folks agree with that?
> 
> Tom
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> 
> -- 
> David Langenberg
> Identity & Access Management
> The University of Chicago
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140604/07357c95/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140604/07357c95/attachment.bin