
<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I’m not positive but they keep claiming schema mismatch or some thing.<div class=""><br class=""></div><div class="">So I just wanted to get ahead of this while I wait for them to respond.</div><div class=""><br class=""></div><div class="">Thanks for the help everyone!</div><div class=""><br class=""></div><div class="">Mel</div><div class=""><br class=""><div class="">

<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><font color="#007236" class=""><b class="">Melvin Lasky</b><br class="">Associate Director of Enterprise Architecture</font><br class=""><br class=""></span></div><span><img apple-inline="yes" id="56C6AAA6-827A-41CA-85E2-E010A364064B" src="cid:30040C3B-58F3-41D0-91CF-B57E6B6E2FB7@manhattan.edu" class=""></span><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><br class=""><br class=""><br class="">Riverdale, NY 10471<br class="">Phone: 718-862-7410<br class=""><a href="mailto:melvin.lasky@manhattan.edu" class="">melvin.lasky@manhattan.edu</a><br class="">www.manhattan.edu</span><br class=""><br class=""></div>

</div>

<div><br class=""><blockquote type="cite" class=""><div class="">On Sep 28, 2022, at 12:33 PM, Peter Schober via users <<a href="mailto:users@shibboleth.net" class="">users@shibboleth.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">* Wessel, Keith via users <<a href="mailto:users@shibboleth.net" class="">users@shibboleth.net</a>> [2022-09-28 18:21]:<br class=""><blockquote type="cite" class="">Deny rules are evaluated before permit rules and will thus cancel<br class="">out any automatic releases from permits.<br class=""></blockquote><br class="">Not literally "before" as the attribute filter doesn't do "first (or<br class="">last) match wins" -- it evaluates and applies /all/ matching<br class="">policies. It's just that "deny" always wins over "permit" which is the<br class="">sane choice given overlapping and contradictory policies.<br class=""><br class="">-peter<br class="">-- <br class="">For Consortium Member technical support, see <a href="https://www.google.com/url?q=https://shibboleth.atlassian.net/wiki/x/ZYEpPw&source=gmail-imap&ust=1664987604000000&usg=AOvVaw2WJfEe_W5X9fcA0vYSF-e7" class="">https://www.google.com/url?q=https://shibboleth.atlassian.net/wiki/x/ZYEpPw&source=gmail-imap&ust=1664987604000000&usg=AOvVaw2WJfEe_W5X9fcA0vYSF-e7</a><br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a><br class=""></div></div></blockquote></div><br class=""></div></body></html>