title: Azure ACS - Should I encrypt ClaimTypes.NameIdentifier information?
body: <p>I am currently working on a project that implements Azure ACS. I got the basics working and I notice that Azure ACS sends me SAML information which includes identityProvider and NameIdentifier. Using the 2 I can establish uniqueness for all users.</p>
  
  <p>Currently these 2 data are stored in a central database in plain text format. For identityProvider it's no big deal, but Nameidentifier is different, I think. Should I encrypt NameIdentifier in database / logs for security reasons, or that's overkill? Can I hacker use NameIdentifier information to impersonate a legit user?</p>