CR 2390 – Using SubjectUUID to verify identity