Defining User Identification for Liberty and SAML 2.0