Username_no_double_special Any reason to enforce it?

We also store external_id for SSO logins, that may help you.