Name Identifier
SAML identity providers must use persistent name identifiers to avoid the creation of duplicate user accounts. Upon authentication, the name identifier is used to link the external user account to an internal user account. If the name identifier changes, duplicate linked user accounts will be created upon authentication.