Multiple login attribute best practices

[Eric Goodman]

Scott said:
> It's not considered a best practice with Shibboleth to use the NameID
> for anything unless the transient or persistent Format is involved.


This caught my eye. Do you mean "any of the NameID Formats defined in the SAML standard" or literally "any NameID Format other than transient or persistent"?

Not critical but I'm curious. You may recall that about a year ago I asked about a case where a vendor (at least claims) they require the userID in the NameID, and neither transient nor persistent format were appropriate. We ultimate defined a custom NameID Format and use the NameID's value (and not an attribute) as the userID at the SP. I'm wondering if you're meaning to say this is bad practice. 

(And apologies if this should have been put in a separate thread. It seemed on topic enough given the rest of the thread.)

--- Eric