1
1
.
.
1
1
.
.
3
3
A
A
u
u
t
t
h
h
e
e
n
n
t
t
i
i
c
c
a
a
t
t
i
i
o
o
n
n
-
-
C
C
r
r
e
e
d
d
e
e
n
n
t
t
i
i
a
a
l
l
s
s
v
v
s
s
P
P
r
r
i
i
n
n
c
c
i
i
p
p
a
a
l
l
I
I
n
n
f
f
o
o
Confusion sometimes arises from the fact that the same thing can sometimes have multiple roles.
● For instance Username can be part of Credentials to allow Authentication.
● But if Usernames are unique across the Application then Username can also be used as Identity/Principal - something
that uniquely identifies Subject inside the Application.
Some Applications allow Users to have the same Usernames (like Facebook).
So in such Applications Identity/Principal has to be something else like: ID, Email Address, Phone Number.
