Docusign

[Cantor, Scott]

> To belabor what is probably obvious, the end users need not know and do
> not ordinarily see this NameID "identifier with a long ugly value."

The fact that I can't actually promise that is why I'm generally opposed to use of persistent IDs. e.g. Confluence, Jira, etc. A failed experiment in my mind, and I don't see OpenID changing that. Mandating the concept doesn't magically change how applications work, and displaying the ID is just too ingrained now.

> Presumably DocuSign addresses or displays users using - what? - the required first and
> last name? the required email address? nothing?

It's always been email address, but I don't know if that's changing as they roll out this new platform. But I think that's unlikely. But I believe that the long term plan is for them to switch off it as the internal ID (to whatever value you give them) and eventually support multiple email addresses per account at some future point, hopefully. I don't think that part is there yet, but they're aware of the problem and the SAML changes were in part to move in that direction.

-- Scott