Username_no_double_special Any reason to enforce it?

Yes, it is OK to turn off editing of usernames if the SSO scheme requires them to match.