Multiple login attribute best practices

[Tom Scavo]

On Sat, Mar 8, 2014 at 12:52 PM, Zico <mailzico at gmail.com> wrote:
>
> I am just little bit curious on one issue. What if I have four SPs and every
> SP require different type of  unique attributes? As for example: SP1,SP2,
> SP3 and SP4 require Email, OrgID ( custom att. ),  SerialNum ( custom att. )
> and UID respectively.
>
> Now, I can definitely create and release these attributes from my IDP but my
> question is: is it a good practice to use multiple attributes as the NameID
> in same IDP?

The SAML NameID is separate from user attributes. Simply fix the
NameID (to Transient or Persistent) and vary the attributes as needed.

Hope this helps,

Tom