off topic - oidc sub claim value

[Liam Hoekenga]

I apologize for the off topic post, but I figure that many of you will have
experience and / or opinions with this.

We're in the process of piloting the Unicon MitreID Connect (OIDC) overlay
for IDP 3.

WRT the OIDC "sub" claim - is there an expectation that it's an opaque
identifier?  There's a page in the shib wiki discussing name ids that
suggests this -
https://wiki.shibboleth.net/confluence/display/CONCEPT/NameIdentifiers

Would an opaque, persistent identifier be considered best practice?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180109/89e1c07f/attachment.html>