Here are my questions:
1. Which attribute passed in our SAML assertion do you use as the key to your local user profile record: email address, Lexmark shortname, or Lexmark Employee Serial Number?
2. Our SAML asserstion sends you the user's email address when a user is logging on to your application (or SaaS) - do you update the users local profile with that email address or do you ignore it?
3. If you ignore it, is it because you dont store the Lexmark user's email address?
Rob, for a question like this, I would file it in your Support space to make sure you get the best possible response. Let me know if you have any questions. =)