<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
I was curious. The ldap service our IdP uses pulled my values and
another staff in a different order:<br>
<br>
mine:<br>
<font face="monospace">edupersonaffiliation: staff<br>
edupersonaffiliation: employee<br>
edupersonaffiliation: member<br>
</font><br>
another staff:<br>
<font face="monospace">edupersonaffiliation: employee<br>
edupersonaffiliation: member<br>
edupersonaffiliation: staff<br>
</font><br>
but via the aacli tool they both were displayed as the same:<br>
<br>
<font face="monospace"><saml2:Attribute
FriendlyName="eduPersonScopedAffiliation"
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><br>
<saml2:AttributeValue xmlns:xsd=<a class="moz-txt-link-rfc2396E" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_XMLSchema&d=DwMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=fr81nQzmGPLsYKncbgGd3CIooUic7HiQ-rjeTPu3v_E&s=ka8ft4DpbkvnVNq4Vu31RLSnuDe1qznGFGSje-Njh6w&e=">"http://www.w3.org/2001/XMLSchema"</a>
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_XMLSchema-2Dinstance&d=DwMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=fr81nQzmGPLsYKncbgGd3CIooUic7HiQ-rjeTPu3v_E&s=qdoskik9byCUAtkJNpORhXQr-PD72kTnzsg1P-mAXEM&e=">"http://www.w3.org/2001/XMLSchema-instance"</a>
xsi:type="xsd:string"><b><a class="moz-txt-link-abbreviated" href="mailto:staff@jmu.edu">staff@jmu.edu</a></b></saml2:AttributeValue><br>
<saml2:AttributeValue xmlns:xsd=<a class="moz-txt-link-rfc2396E" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_XMLSchema&d=DwMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=fr81nQzmGPLsYKncbgGd3CIooUic7HiQ-rjeTPu3v_E&s=ka8ft4DpbkvnVNq4Vu31RLSnuDe1qznGFGSje-Njh6w&e=">"http://www.w3.org/2001/XMLSchema"</a>
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_XMLSchema-2Dinstance&d=DwMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=fr81nQzmGPLsYKncbgGd3CIooUic7HiQ-rjeTPu3v_E&s=qdoskik9byCUAtkJNpORhXQr-PD72kTnzsg1P-mAXEM&e=">"http://www.w3.org/2001/XMLSchema-instance"</a>
xsi:type="xsd:string"><b><a class="moz-txt-link-abbreviated" href="mailto:employee@jmu.edu">employee@jmu.edu</a></b></saml2:AttributeValue><br>
<saml2:AttributeValue xmlns:xsd=<a class="moz-txt-link-rfc2396E" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_XMLSchema&d=DwMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=fr81nQzmGPLsYKncbgGd3CIooUic7HiQ-rjeTPu3v_E&s=ka8ft4DpbkvnVNq4Vu31RLSnuDe1qznGFGSje-Njh6w&e=">"http://www.w3.org/2001/XMLSchema"</a>
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_XMLSchema-2Dinstance&d=DwMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=fr81nQzmGPLsYKncbgGd3CIooUic7HiQ-rjeTPu3v_E&s=qdoskik9byCUAtkJNpORhXQr-PD72kTnzsg1P-mAXEM&e=">"http://www.w3.org/2001/XMLSchema-instance"</a>
xsi:type="xsd:string"><b><a class="moz-txt-link-abbreviated" href="mailto:member@jmu.edu">member@jmu.edu</a></b></saml2:AttributeValue><br>
</saml2:Attribute><br>
</font><br>
so it made me wonder is there was some sorting logic.<br>
<br>
Thanks,<br>
Don<br>
<br>
<div class="moz-cite-prefix">On 6/16/21 11:48 AM, Cantor, Scott
wrote:<br>
</div>
<blockquote type="cite" cite="mid:F9DABE78-89E9-4BD1-990F-30D88300B801@osu.edu">
<pre class="moz-quote-pre" wrap="">CAUTION: This email originated from outside of JMU. Do not click links or open attachments unless you recognize the sender and know the content is safe.
________________________________
On 6/16/21, 11:44 AM, "users on behalf of Donald Lohr" <a class="moz-txt-link-rfc2396E" href="mailto:users-bounces@shibboleth.netonbehalfoflohrda@jmu.edu"><users-bounces@shibboleth.net on behalf of lohrda@jmu.edu></a> wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap=""> What determines the list order of these values?
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Nothing does, it's unspecified. The resolver maintains the order only during the resolution phase, after that it's indeterminate even between servers. It is not a "feature" that it is, but making it at least deterministic requires API changes.
-- Scott
--
For Consortium Member technical support, see <a class="moz-txt-link-freetext" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=qoZu0aHUSfeti-s4q0bxn5e95_uaKVyPwlyGR2JbRUY&s=F2AJrw_JBakgWpdfTOH5mfk_tTmBHIMDB6sIS_-9FS0&e=">https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=qoZu0aHUSfeti-s4q0bxn5e95_uaKVyPwlyGR2JbRUY&s=F2AJrw_JBakgWpdfTOH5mfk_tTmBHIMDB6sIS_-9FS0&e=</a>
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
D o n a l d L o h r
I n f o r m a t i o n S y s t e m s
J a m e s M a d i s o n U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0
</pre>
</body>
</html>