Hi Nikolas,
I know it has been a while since this topic was raised but I came across this issue today with someone using Moodle and trying to connect to a Tool Provider I maintain using the username that must match in the two systems.
According to the spec the right place to put the username is lis_person_sourcedid
sic.
lis_person_sourcedid=school.edu:user
This field contains the LIS identifier for the user account that
is performing this launch. The example syntax of "school:user"
is not the required format – lis_person_sourcedid is
simply a unique identifier (i.e., a normalized string). This
field is optional and its content and meaning are defined by LIS
[LIS, 11].
And yes, it is optional, meaning that you don't need to send it in order to get certified as an LTI Tool Consumer. But, the true is that it is commonly required when you need a way for matching accounts in two different systems (the main idea of LTI 1.0 aka BasicLTI)
There are other LMS including this parameters (Sakai, D2L), so I think it is something you should consider to include in a further release.
For those looking for a quick (although dirty) solution, you only need to add a line to hock the parameter with the "Share launcher's name with the tool" option. In the line 271 insert
$requestparams['lis_person_sourcedid'] = $USER->username;
The correct way to do this would be to add an option in Privacy to allow sending username, just like D2L does.
Regards,
Jesus Federico
BigBlueButton developer