Reused usernames and persistentIds

[Ramon Pfeiffer]

Am 22.10.2014 um 18:51 schrieb Cantor, Scott:
> On 10/22/14, 12:33 PM, "John Hascall" <john at iastate.edu> wrote:
>
>> Does uApprove give you the ability to compute the persistentId using a
>> field other than the username?
>
> uApprove doesn't have anything to do with managing persistent IDs. For the
> IdP, the answer is yes, it's a requirement. Using usernames for this is a
> terrible idea that nobody should even consider, whether they reassign them
> or not. Most usernames change anyway.

Alright, it seems I blamed uApprove wrongly here.

But as far as I can see, the IdPPersistentNameIdentifier as defined in 
the Shibboleth wiki [1] is based on the storedId which in turn is based 
on the username. Do I miss something?

Thanks,
Ramon

[1]: 
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPPersistentNameIdentifier

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5054 bytes
Desc: S/MIME Cryptographic Signature
Url : http://shibboleth.net/pipermail/users/attachments/20141023/0dc37463/attachment.bin