> I don't think I'll be able to keep the same entity ID for a number of
> there's going to be some pain any way I do it.
They'd better be pretty compelling given the pain that your users (and to a
degree) you will suffer. But you know your domain, we don't.
I see that (as of last night) there are two PingFederate IdPs in the UK
Federation metadata, you might want to reach out to their operators and find
out what issue they have had.