<div dir="ltr"><div>We use email address as our primary user identifier internally, and when originally setting up support for shibboleth, we assumed eppn was an email address. With at least one of the IDPs we deal with, that proved to be a unsafe assumption. <br>
<br>In the end, we moved to using targeted id or eppn to identify shibboleth users, but request mail attribute so the rest of our system has the identifier it expects.<br><br></div><div>So, having been bitten personally, I would recommend using the mail attribute if you plan to do emaily things.<br>
</div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Jun 5, 2014 at 7:14 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">On 6/5/14, 4:45 AM, "Dave Perry" <<a href="mailto:Dave.Perry@hull-college.ac.uk">Dave.Perry@hull-college.ac.uk</a>> wrote:<br>
<br>
>We only send the actual staff/student usernames as unconverted eppn to<br>
>internally hosted SPs - external SPs get the transientId (the computed<br>
>one) + the eduPersonScopedAffiliation (Staff or Student, which is managed<br>
>by IDM).<br>
<br>
</div>I think you mean persistent ID, a transient is not used by applications.<br>
<br>
That's fine as a goal, but many applications simply do not function well<br>
with opaque, long, non-familiar identifiers.<br>
<div class=""><br>
>So I'm taking the view that association by email address is not<br>
>consistent enough.<br>
<br>
</div>If the choice is the application not working at all, or some breakage due<br>
to name changes, it's just the way it is.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div dir="ltr"><p style="line-height:1;margin-top:3.6pt;margin-bottom:0pt"><span style="font-size:19px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">James Miller<br>
</span></p><p dir="ltr" style="line-height:1;margin-top:3.6pt;margin-bottom:0pt;margin-left:27pt"><span style="font-size:37px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></p>
<p style="line-height:1;margin-top:3.6pt;margin-bottom:0pt"><span style="font-size:19px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">Database Engineer</span></p>
<p dir="ltr" style="line-height:1;margin-top:3.6pt;margin-bottom:0pt;margin-left:27pt"><span style="font-size:19px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></p>
<p style="line-height:1;margin-top:3.6pt;margin-bottom:0pt"><span style="font-size:19px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">Turnitin – </span><a href="http://www.turnitin.com" style="text-decoration:none" target="_blank"><span style="font-size:19px;font-family:Arial;color:#0000ff;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:underline;vertical-align:baseline">www.turnitin.com</span></a><span style="font-size:37px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></p>
<p style="line-height:1;margin-top:3.6pt;margin-bottom:0pt"><a href="mailto:jdoe@turnitin.com" style="text-decoration:none" target="_blank"><span style="font-size:19px;font-family:Arial;color:#0000ff;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:underline;vertical-align:baseline">jmiller@turnitin.com</span></a><span style="font-size:37px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></p>
<span style="font-size:19px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">510.387.5071</span></div>
</div>