...

• (Unique-1) The user identifier represents a single natural person;
• (Unique-2) The CSP Identity Provider can contact the person to whom the identifier is issued;
• (Unique-3) The user identifier is never re-assigned; and
• (Unique-4) The user identifier is eduPersonUniqueId, SAML 2.0 persistent name identifier, SAML V2.0 Subject Identifier Attribute subject-id or SAML V2.0 Subject Identifier Attribute pairwise-id.

...

REFEDS Assurance Framework imposes no particular requirements on the organisational business practices regarding when the departure takes place. This value is intended to indicate only the maximum latency for the CSP’s Identity Provider’s identity management system to reflect the departure in the user’s attributes.

...