Multiple login attribute best practices

Tom Scavo trscavo at gmail.com
Mon Mar 10 19:56:15 EDT 2014


On Mon, Mar 10, 2014 at 7:52 PM, Eric Goodman <Eric.Goodman at ucop.edu> wrote:
> Scott said:
>> It's not considered a best practice with Shibboleth to use the NameID
>> for anything unless the transient or persistent Format is involved.
>
> This caught my eye. Do you mean "any of the NameID Formats defined in the SAML standard" or literally "any NameID Format other than transient or persistent"?

Sorry for jumping in...but surely the latter. For example, Google Apps
for Education requires emailaddress as NameID, which most have
criticized as bad practice.

Tom


More information about the users mailing list