So the user can still change their email address in JForum?
This is a problem for my app, since email is the key for login and user lookup. If the user changes the email address in JForm, everything will be out of sync. In other words, email is how I look up the user in JForum.
Now that I say this, I can see another problem. The SSO expects a username to be returned. But usernames are not guarenteed to be unique. There are certainly going to be many collisions on username, unless it could be coerced into the email address. Can it? [originally posted on jforum.net by time]
The username returned is the one that will be recored to jforum_users, if a matching record is not found - in other words, it should be a unique username. And yes, you can use the email address, but then that's will be the username shown in the forum.
Rafael [originally posted on jforum.net by Rafael Steil]