We're starting to set up Shibboleth with a new campus-wide Moodle with plans for users coming from other universities, as well as special cases set up with Moodle's default accounts. Since the usernames of all of these have to all fit in one namespace, we're thinking about using email address as the Moodle username. But we're concerned about maintaining student privacy.
The question is whether the Moodle username is ever displayed anywhere without the user's permission. This is different from the Moodle email field which they can choose to display or not.
Does it make sense to use email address as username, and does it stay hidden? We don't want to use it if it will appear on forums, participant lists or some other location. We just need it because it lets us have a unique username for a) all 35,000 UCLA staff, students and faculty, b) non-UCLA class participant special cases that always turn up, c) business school corporate project members, and d) allow Shibboleth access from other schools.
What are other Shibboleth/Moodle sites doing?
Thanks, and if this is answered elsewhere, I apologize and will search longer next time.