Multiple login attribute best practices
Tom Scavo
trscavo at gmail.com
Mon Mar 10 19:56:15 EDT 2014
On Mon, Mar 10, 2014 at 7:52 PM, Eric Goodman <Eric.Goodman at ucop.edu> wrote:
> Scott said:
>> It's not considered a best practice with Shibboleth to use the NameID
>> for anything unless the transient or persistent Format is involved.
>
> This caught my eye. Do you mean "any of the NameID Formats defined in the SAML standard" or literally "any NameID Format other than transient or persistent"?
Sorry for jumping in...but surely the latter. For example, Google Apps
for Education requires emailaddress as NameID, which most have
criticized as bad practice.
Tom
More information about the users
mailing list