Two Scopes in Metadata

[Cantor, Scott]

> I am currently setting up a v3 IDP and after reading the comments in
> attribute-resolver.xml, it says to 'consider making the EPPN value the same
> as your official email addresses whenever possible'.

That's up to you. If you don't, then a number of cloud integrations (e.g. Box) will become painful. If you do, they won't. What you do with that information is a local decision.

What I would not do, personally, is ever change how you issue EPPN after the fact or use multiple scopes and create a non-uniform namespace unless I had a really good reason. That's at least as much pain, if not more, as not having routable EPPNs.

None of this has, really, anything to do with Shibboleth, these are just eduPerson and basic cloud integration issues. Shibboleth literally does not know or care about this.

-- Scott