how would we suggest improving the user experience at this SP

[David Hodnett]

On Wed, Jun 4, 2014 at 11:26 AM, David Bantz <dabantz at alaska.edu> wrote:

>
> If starting identity management or institutional email from scratch, I
> would like a policy
> requiring an unchanging identifier that would be used for ePPN and a
> persistent
> routable email address.  I would also expect a lot of resistance from
> several quarters
> (in principal, because it represents a constraint on their authority for
> unilateral decisions).
>
> David Bantz
>
>
As an SP, we are proceeding on the assumption that the IdP guarantees that
this ePPN is unique for each user but the address itself is not necessarily
routable. Our application later asks the user to confirm the provided
address is valid and gives them the opportunity to either correct it or
otherwise opt-out of receiving email. I've always felt that this was a
reasonable compromise given that each institution has its own privacy
policy for political reasons as David Bantz implied.

However, based on the tone of this thread, should we at all be concerned
that a given school might send "shibboleth-support at example.edu" as the ePPN
for each and every incoming user, again for political reasons?

David Hodnett
david at pathbrite.com
http://pathbrite.com
@pathbrite
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140604/8d919d0c/attachment.html