<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Ok that’s good to know….<div class=""><br class=""></div><div class="">I added your section in relying-party so I think they now have something wrong on their end.</div><div class=""><br class=""></div><div class="">Thanks for your assistance.</div><div class=""><br class=""></div><div class="">I’m still waiting for them to respond.</div><div class=""><br class=""></div><div class="">Mel</div><div class=""><br class=""><div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><font color="#007236" class=""><b class="">Melvin Lasky</b><br class="">Associate Director of Enterprise Architecture</font><br class=""><br class=""></span></div><span><img apple-inline="yes" id="8C5969A9-2021-4DEE-99CF-96E52D84B8D2" src="cid:30040C3B-58F3-41D0-91CF-B57E6B6E2FB7@manhattan.edu" class=""></span><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><br class=""><br class=""><br class="">Riverdale, NY 10471<br class="">Phone: 718-862-7410<br class=""><a href="mailto:melvin.lasky@manhattan.edu" class="">melvin.lasky@manhattan.edu</a><br class="">www.manhattan.edu</span><br class=""><br class=""></div>
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On Sep 28, 2022, at 1:30 PM, IAM David Bantz <<a href="mailto:dabantz@alaska.edu" class="">dabantz@alaska.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><div dir="ltr" class="">As far as I can tell, NSC does ignore the additional attributes released because their SP is in InCommon. I don’t filter them out.</div><div dir="ltr" class=""><br class=""></div><div dir="ltr" class="">I believe they required a persistent nameID in the subject, which may require an override configured, e.g..:</div><div dir="ltr" class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(64, 11, 217);" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><!-- National Student Clearing House wants "persistent" nameID --></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><bean </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">parent</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"RelyingPartyByName"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">c</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9" class="">:</span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">relyingPartyIds</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"#{{'<a href="https://www.google.com/url?q=https://id.studentclearinghouse.org/saml2/service-provider/myhub%27%7D&source=gmail-imap&ust=1664991006000000&usg=AOvVaw1FPN22F2PPa4gqVdQ-6vxc" class="">https://id.studentclearinghouse.org/saml2/service-provider/myhub'}</a>}"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class="">></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><property </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">name</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"profileConfigurations"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class="">></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><list></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><bean </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">parent</span><span style="font-variant-ligatures:no-common-ligatures" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"SAML2.SSO"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""> </span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">p</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9" class="">:</span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">nameIDFormatPrecedence</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""> ></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><property </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">name</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"defaultAuthenticationMethods"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class="">></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><list></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><bean </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">parent</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"shibboleth.SAML2AuthnContextClassRef"</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">c</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9" class="">:</span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">classRef</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""> /></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><bean </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">parent</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"shibboleth.SAML2AuthnContextClassRef"</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">c</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9" class="">:</span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">classRef</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"<a href="https://www.google.com/url?q=https://refeds.org/profile/mfa&source=gmail-imap&ust=1664991006000000&usg=AOvVaw3LVyMNXziYc9RBbTOxncvQ" class="">https://refeds.org/profile/mfa</a>"</span><span style="font-variant-ligatures:no-common-ligatures" class=""> /></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""></list></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""></property></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""></bean></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; min-height: 13px;" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""></list></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""></property></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""></bean></span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div></div><div dir="ltr" class="">My attribute policy is simple, parallel to yours:</div><div dir="ltr" class=""><br class=""></div><div dir="ltr" class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><AttributeFilterPolicy </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">id</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"releaseTo</span><span style="font-variant-ligatures: no-common-ligatures; background-color: rgb(135, 138, 4);" class="">NSC</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"</span><span style="font-variant-ligatures:no-common-ligatures" class="">></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class="">…</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><font color="#400bd9" face="Menlo" class=""><span style="font-size:11px" class=""><!</span><span style="font-size:11px" class="">—</span><span style="font-size:11px" class=""> ePUID released to appear as persistent NameID --></span></font><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><AttributeRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">attributeID</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"eduPersonUniqueID"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class="">></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""><PermitValueRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">xsi</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9" class="">:</span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">type</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"ANY"</span><span style="font-variant-ligatures:no-common-ligatures" class=""> /></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""></AttributeRule></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""><AttributeRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">attributeID</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"</span><span style="font-variant-ligatures: no-common-ligatures; background-color: rgb(135, 138, 4);" class="">NSC</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">EmailAddress"</span><span style="font-variant-ligatures:no-common-ligatures" class="">></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""><PermitValueRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">xsi</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9" class="">:</span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">type</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"ANY"</span><span style="font-variant-ligatures:no-common-ligatures" class=""> /></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""></AttributeRule></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""><AttributeRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">attributeID</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"</span><span style="font-variant-ligatures: no-common-ligatures; background-color: rgb(135, 138, 4);" class="">NSC</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">GivenName"</span><span style="font-variant-ligatures:no-common-ligatures" class="">></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""><PermitValueRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">xsi</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9" class="">:</span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">type</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"ANY"</span><span style="font-variant-ligatures:no-common-ligatures" class=""> /></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""></AttributeRule></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""><AttributeRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">attributeID</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"</span><span style="font-variant-ligatures: no-common-ligatures; background-color: rgb(135, 138, 4);" class="">NSC</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">LastName"</span><span style="font-variant-ligatures:no-common-ligatures" class="">></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""><PermitValueRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">xsi</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9" class="">:</span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">type</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"ANY"</span><span style="font-variant-ligatures:no-common-ligatures" class=""> /></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""></AttributeRule></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(64, 11, 217);" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><!-- ID# is UA ID # --></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class=""><AttributeRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">attributeID</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures" class="">"</span><span style="font-variant-ligatures: no-common-ligatures; background-color: rgb(135, 138, 4);" class="">NSC</span><span style="font-variant-ligatures:no-common-ligatures" class="">SchoolAssignedPersonID"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb" class="">></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""><PermitValueRule </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">xsi</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9" class="">:</span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d" class="">type</span><span style="font-variant-ligatures: no-common-ligatures;" class="">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419" class="">"ANY"</span><span style="font-variant-ligatures:no-common-ligatures" class=""> /></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""> </span><span style="font-variant-ligatures:no-common-ligatures" class=""></AttributeRule></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""></AttributeFilterPolicy></span></div></div>
<div class=""><br class=""></div><div dir="ltr" class="">David St Pierre Bantz</div><div dir="ltr" class="">U Alaska</div><br class="">
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On 28Sep2022 at 08:05:40, Melvin Lasky via users <<a href="mailto:users@shibboleth.net" class="">users@shibboleth.net</a>> wrote:<br class=""></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" type="cite">
<div class=""><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""></div><div style="word-wrap:break-word;line-break:after-white-space" class="">Hey everyone,<div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>I’m having an issue with the national student clearing house. They wanted 4 specific attributes, named in a specific way. I have done that, but not only does it send the four they want, it also sends the InCommon attributes. I guess it matches both.</div><div class=""><br class=""></div><div class="">How can I exclude the sending of the InCommon attributes while enabling the specific four for the Clearing House people.</div><div class=""><br class=""></div><div class="">I hope this makes sense.</div><div class=""><br class=""></div><div class=""><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><AttributeFilterPolicy id="releaseForNSC" ></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <PolicyRequirementRule xsi:type="Requester" value=“<ValueProvidedByNSC>" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="SchoolAssignedPersonID" permitAny="true" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="EmailAddress" permitAny="true" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="GivenName" permitAny="true" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="LastName" permitAny="true" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""></AttributeFilterPolicy></span></div></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class="">And I have this after (I use the InCommon Shib Docker Container):</span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <!-- Attribute release for all InCommon SPs --></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeFilterPolicy id="releaseToInCommon"><span class="Apple-tab-span" style="white-space:pre"> </span></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <PolicyRequirementRule xsi:type="EntityAttributeExactMatch"</span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>attributeName="<a href="https://www.google.com/url?q=http://macedir.org/entity-category&source=gmail-imap&ust=1664991006000000&usg=AOvVaw1BbuYJq73_UCCGLEbYF3yy" class="">http://macedir.org/entity-category</a>"</span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>attributeValue="<a href="https://www.google.com/url?q=http://id.incommon.org/category/registered-by-incommon&source=gmail-imap&ust=1664991006000000&usg=AOvVaw0UHNSIQ6EGNG6nVZKN_lOx" class="">http://id.incommon.org/category/registered-by-incommon</a>"/></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="eduPersonPrincipalName"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="eduPersonScopedAffiliation"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="givenName"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="surname"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="displayName"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <AttributeRule attributeID="mail"></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> <PermitValueRule xsi:type="ANY" /></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </AttributeRule></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""> </AttributeFilterPolicy></span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9);min-height:14px" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""></span><br class=""></div></span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><div class=""><div class="" style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span class="" style="font-variant-ligatures:no-common-ligatures">shib-idp;idp-process.log;dev;nothing; - [IPADDRESS]2022-09-22 13:32:18,401 - INFO [Shibboleth-Audit.SSO:283] - 2022-09-22T13:32:18.401715Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST| random_characters | ValueProvidedByNSC |<a href="https://www.google.com/url?q=http://shibboleth.net/ns/profiles/saml2/sso/browser%7Chttps://ouridp.domain.ed/idp/shibboleth%7Curn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST%7C&source=gmail-imap&ust=1664991006000000&usg=AOvVaw0ILMj0mwTKWUrtXzHffu1j" class="">http://shibboleth.net/ns/profiles/saml2/sso/browser|https://ouridp.domain.ed/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|</a> random_characters |myudernamer|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|eduPersonScopedAffiliation,mail,surname,displayName,givenName,GivenName,eduPersonPrincipalName,LastName,EmailAddress,SchoolAssignedPersonID|random_characters| random_characters |</span></div><div class=""><br class=""></div></div></span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class="">So not exactly sure what to do.</span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class="">They have not been very responsive to say the least. This is the first time I’m having an issue with an InCommon provider. Usually it’s 1-2-3.</span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class="">Mel</span></div><div class=""><br class=""><div class="">
<div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none;" class=""><span style="font-size:14px" class=""><font color="#007236" class=""><b class="">Melvin Lasky</b><br class="">Associate Director of Enterprise Architecture</font><br class=""><br class=""></span></div><span class=""><span id="cid:30040C3B-58F3-41D0-91CF-B57E6B6E2FB7@manhattan.edu"><1.jpeg></span></span><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none;" class=""><span style="font-size:14px" class=""><br class=""><br class=""><br class="">Riverdale, NY 10471<br class="">Phone: 718-862-7410<br class=""><a href="mailto:melvin.lasky@manhattan.edu" class="">melvin.lasky@manhattan.edu</a><br class=""><a href="https://www.google.com/url?q=http://www.manhattan.edu&source=gmail-imap&ust=1664991006000000&usg=AOvVaw1aEy4niqktl3uw6PE_SePo" class="">www.manhattan.edu</a></span><br class=""><br class=""></div>
</div>
<br class=""></div></div></div>
<div class="">
<div class="">
-- <br class="">For Consortium Member technical support, see <a href="https://www.google.com/url?q=https://shibboleth.atlassian.net/wiki/x/ZYEpPw&source=gmail-imap&ust=1664991006000000&usg=AOvVaw0lTMgxNhHP2dyd8ysW-QEz" class="">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a><br class="">
</div>
</div>
</blockquote>
</div></div>
</div></blockquote></div><br class=""></div></body></html>