Ahh right. No that isn't going to happen. Ian and I are responsible for making sure it doesn't, Not on our watch! We say BBD. (better by design) Cheers Andy > -----Original Message----- > From: Discussion list for Shibboleth developments [mailto:JISC- > [log in to unmask]] On Behalf Of Rod Widdowson > Sent: 06 September 2016 11:40 > To: [log in to unmask] > Subject: Re: Change of login principal attribute for shib2 login > > > Sorry, I'm not sure I understand what you mean? Cn will just match > <alswiffin> > > userprincipalname will match <[log in to unmask]> ne'er the twain > shall > > meet. > > Sounds like an ldapy thing. My concern would be if there as a > "userprincipalname" called <alswiffin> who wasn't you.... I know, it's unlikely > but I spend my life worrying about these what-ifs.... Only you can say if it's > ridiculous by construction (probably), impossible by rule (also > probably) or plain disappearingly unlikely... > > /R The University of Dundee is a registered Scottish Charity, No: SC015096