DocuSign SSO issues on Dev environment.

[Cantor, Scott]

On 11/30/16, 6:31 PM, "users on behalf of Klingenstein, Nate" <users-bounces at shibboleth.net on behalf of nklingenstein at calstate.edu> wrote:

>It seems plausible to me that DocuSign is looking for a persistent identifier that is preferably non-reassignable
> and using it as a blind primary key for a user record, but there is no single term on the wire for that.

There are two; persistent SAML NameIDs, and the eduPersonUniqueID attribute, which is its own NameID Format if need be.
    
 >   That's exactly what I'd want to see built.  I wish we had coherent verbiage for it.

We do. Coherent verbage doesn't fix people's unwillingness to accept limitations. SPs aren't willing to adopt requirements because that just costs customers, and so the answer is "whatever".

-- Scott