>I'm not sure I understand what you mean by prepopulating a database. >Does Shib IdP keep a database with users? No, but the preferred way to handle pairwise ID is with a database to store them, revoke them, etc. When the hashing trick runs out of steam, that's where you'd go next. -- Scott