Comment by mattgreenrocks

What should providers be using?

I've always presumed email was the most stable global identifier for a user, but that assumption appears to be wrong.