edupersonscopedaffiliation order

[Donald Lohr]

I was curious. The ldap service our IdP uses pulled my values and 
another staff in a different order:

mine:
edupersonaffiliation: staff
edupersonaffiliation: employee
edupersonaffiliation: member

another staff:
edupersonaffiliation: employee
edupersonaffiliation: member
edupersonaffiliation: staff

but via the aacli tool they both were displayed as the same:

<saml2:Attribute FriendlyName="eduPersonScopedAffiliation" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
     <saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:type="xsd:string">*staff at jmu.edu*</saml2:AttributeValue>
     <saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:type="xsd:string">*employee at jmu.edu*</saml2:AttributeValue>
     <saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:type="xsd:string">*member at jmu.edu*</saml2:AttributeValue>
</saml2:Attribute>

so it made me wonder is there was some sorting logic.

Thanks,
Don

On 6/16/21 11:48 AM, Cantor, Scott wrote:
> CAUTION: This email originated from outside of JMU. Do not click links or open attachments unless you recognize the sender and know the content is safe.
> ________________________________
>
> On 6/16/21, 11:44 AM, "users on behalf of Donald Lohr" <users-bounces at shibboleth.net on behalf of lohrda at jmu.edu> wrote:
>
>>     What determines the list order of these values?
> Nothing does, it's unspecified. The resolver maintains the order only during the resolution phase, after that it's indeterminate even between servers. It is not a "feature" that it is, but making it at least deterministic requires API changes.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=qoZu0aHUSfeti-s4q0bxn5e95_uaKVyPwlyGR2JbRUY&s=F2AJrw_JBakgWpdfTOH5mfk_tTmBHIMDB6sIS_-9FS0&e=
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-- 
D o n a l d   L o h r
I n f o r m a t i o n   S y s t e m s
J a m e s   M a d i s o n   U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210616/a64dcb3b/attachment.htm>