1. Attribute release

sn, email, ePPN, ePSA, ePEntitlement, ePTID

What is the predominant unique identifier for end users?

eduPersonPrincipalName (ePPN) eduPersonTargetedID(ePTID)/SAML2 PersistentID Is there a policy for what should be used as the unique ID? No.

Software at the IdPs??

But I think most of the IdPs? in the DFN-AAI have been updated since the security advisory of July 25th, 2011. So, hopefully, most of the 95 IdPs? in the DFN-AAI production federation(s) should be 2.3.2 or higher. There are 6 Shibboleth 1.3 / SAML 1.1 IdPs? and AFAIK(!) only one case of SimpleSAMLphp IdP (but some more in the test federation).