<div dir="ltr"><div dir="ltr">Melvin,<div><br></div><div>Assuming you're using InCommon-registered metadata with the Clearing House, both attribute filters will be in effect and it will be released. There are two options I can think of:</div><div><br></div><div>1) Wrap the universal InCommon PolicyRequirementRule in an "AND" PolicyRequirementRule and then include a "NOT" PolicyRequirementRule for any SP's that you don't want to release those attributes to, or;</div><div>2) Add an attribute definition for each of the attributes to the attribute filter policy for the Clearing House that you don't want to send with a DenyValueRule of ANY. DenyValueRules always take precedence over PermitValueRules.</div><div><br></div><div><a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631522/AttributeRuleConfiguration">AttributeRuleConfiguration - Identity Provider 4 - Confluence (atlassian.net)</a><br></div><div><br></div><div>Hope this helps,</div><div>Nate</div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Sep 28, 2022 at 10:06 AM Melvin Lasky via users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;">Hey everyone,<div><span style="white-space:pre-wrap"> </span>I’m having an issue with the national student clearing house. They wanted 4 specific attributes, named in a specific way. I have done that, but not only does it send the four they want, it also sends the InCommon attributes. I guess it matches both.</div><div><br></div><div>How can I exclude the sending of the InCommon attributes while enabling the specific four for the Clearing House people.</div><div><br></div><div>I hope this makes sense.</div><div><br></div><div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"><AttributeFilterPolicy id="releaseForNSC" ></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <PolicyRequirementRule xsi:type="Requester" value=“<ValueProvidedByNSC>" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="SchoolAssignedPersonID" permitAny="true" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="EmailAddress" permitAny="true" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="GivenName" permitAny="true" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="LastName" permitAny="true" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"></AttributeFilterPolicy></span></div></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures:no-common-ligatures">And I have this after (I use the InCommon Shib Docker Container):</span></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures:no-common-ligatures"><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <!-- Attribute release for all InCommon SPs --></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeFilterPolicy id="releaseToInCommon"><span style="white-space:pre-wrap"> </span></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <PolicyRequirementRule xsi:type="EntityAttributeExactMatch"</span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"><span style="white-space:pre-wrap"> </span>attributeName="<a href="http://macedir.org/entity-category" target="_blank">http://macedir.org/entity-category</a>"</span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"><span style="white-space:pre-wrap"> </span>attributeValue="<a href="http://id.incommon.org/category/registered-by-incommon" target="_blank">http://id.incommon.org/category/registered-by-incommon</a>"/></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="eduPersonPrincipalName"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="eduPersonScopedAffiliation"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="givenName"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="surname"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="displayName"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <AttributeRule attributeID="mail"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"> </AttributeFilterPolicy></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9);min-height:14px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></div></span></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures:no-common-ligatures"><div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures">shib-idp;idp-process.log;dev;nothing; - [IPADDRESS]2022-09-22 13:32:18,401 - INFO [Shibboleth-Audit.SSO:283] - 2022-09-22T13:32:18.401715Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST| random_characters | ValueProvidedByNSC |<a href="http://shibboleth.net/ns/profiles/saml2/sso/browser%7Chttps://ouridp.domain.ed/idp/shibboleth%7Curn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST%7C" target="_blank">http://shibboleth.net/ns/profiles/saml2/sso/browser|https://ouridp.domain.ed/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|</a> random_characters |myudernamer|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|eduPersonScopedAffiliation,mail,surname,displayName,givenName,GivenName,eduPersonPrincipalName,LastName,EmailAddress,SchoolAssignedPersonID|random_characters| random_characters |</span></div><div><br></div></div></span></div><div><span style="font-variant-ligatures:no-common-ligatures">So not exactly sure what to do.</span></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures:no-common-ligatures">They have not been very responsive to say the least. This is the first time I’m having an issue with an InCommon provider. Usually it’s 1-2-3.</span></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures:no-common-ligatures">Mel</span></div><div><br><div>
<div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><span style="font-size:14px"><font color="#007236"><b>Melvin Lasky</b><br>Associate Director of Enterprise Architecture</font><br><br></span></div><span><img id="m_32220172403757946216BD43551-BBE1-496E-B626-E01EF23DCAE0" src="cid:18384dc328f565790051"></span><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><span style="font-size:14px"><br><br><br>Riverdale, NY 10471<br>Phone: 718-862-7410<br><a href="mailto:melvin.lasky@manhattan.edu" target="_blank">melvin.lasky@manhattan.edu</a><br><a href="http://www.manhattan.edu" target="_blank">www.manhattan.edu</a></span><br><br></div>
</div>
<br></div></div>-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>