DocuSign SSO issues on Dev environment.
Tom Scavo
trscavo at gmail.com
Wed Nov 30 17:51:23 EST 2016
On Wed, Nov 30, 2016 at 5:46 PM, IAM David Bantz <dabantz at alaska.edu> wrote:
>
> can SAML 3 please deprecate nameids
You probably had a smile on your face when you wrote that :-) but you
are right on. A NameID is nothing more than a distinguished attribute
and it would be simpler to collapse name identifiers and user
attributes into a single concept.
OpenID Connect learned from SAML's shortcomings and requires all
transactions to have a persistent, non-reassigned identifier. That
makes like a whole lot simpler.
Tom
More information about the users
mailing list