Defining User Identification for SAML 1.1