Defining User Identification for SAML 2.0