Releasing same NameID to all service providers

[Kevin Foote]

> On Mar 18, 2015, at 11:30 AM, Alex Olson <ako at byu.edu> wrote:
> 
> Is there a significant vulnerability in releasing a standard persistent nameID (like a uid) that is the same to all service providers? Or, what benefits are there to using something like a StoredID to generate a NameID vs. a persistent NameID that is the same?

Not sure of standard practice here. But I can tell you that different RP integrations will require different values being present in NameID. This gets into the interoperability of other SAML products and implementations. 

--------
thanks
 kevin.foote