Should OIDC subs be globally unique?

[Cantor, Scott]

On 3/27/22, 1:35 AM, "users on behalf of Bergmann, Clemens" <users-bounces at shibboleth.net on behalf of clemens.bergmann at tu-darmstadt.de> wrote:

>    I just recently configured OIDC on our IdP and decided to follow the spec and make the sub claim not
> scoped.

That is not any more "following the spec" than making it domain-scoped is, any value whatsoever is legal (including, as I noted, all whitespace).

-- Scott