Unverified50% confidenceDecision RuleExact time
During reconciliation, the unique user identifier should use the IdP-side id as the primary key rather than userName or email, because the latter may change due to rename operations.
1
Sources
50%
Confidence
Long-term
Relevance
9/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedNot all identity directories proactively send deprovisioning events; some IdPs do not send a separate user-level deprovisioning request when a user is removed from a group or has their application assignment revoked.67% similarUnverifiedIBE 加密体系中用户的身份信息（如邮箱地址、手机号）直接充当公钥，无需传统 PKI 体系中的证书申请与管理流程64% similarUnverifiedEven if a person has two different .edu email addresses, as long as they point to the same real identity, SheerID will very likely identify them as the same person and prevent duplicate benefit claims.64% similarUnverifiedUnder a decentralized identity (DID) architecture, user identity data is not stored centrally on a single corporate server but is instead held and controlled by users through blockchain or distributed ledger technology.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/910731API
curl https://kongchang.com/api/v1/knowledge/claims/910731MCP
get_claim(id=910731)