<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Howdy!</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I'm trying to troubleshoot an issue where a SP is receiving multiple values for EPPN, apparently due to being members of both InCommon and Research and Scholarship (refed) federations. InCommon receives a subset of the same attributes being released to refed,
and the values for eduPersonPrincipalName are being merged so it returns two values.</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
EPPN=user@site.edu;user@site.edu</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
We have had similar cases in the past, where the solution was to set a DenyValueRule for the duplicated attribute - but in that case, the SP was receiving from InCommon and an explicit release for the SP, not from two different federations. Trying the deny
rule this time, it completely removed the EPPN from the release data.</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
To complicate things even more, the SP is using a Cirrus IDP Proxy, which I know nothing about, and don't have any idea how it might be manipulating the release data.</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Is there some way to prioritize the R&S release so that if it is in use, the InCommon release is ignored? That was the suggestion from the admin for the SP that's having this issue. Otherwise, is there some other solution that I can implement for this kind
of situation? My grasp of the details of shibboleth is... shall we say lacking, when it comes to how all the federation setup works.</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Robert Cooper</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; margin-right: 0px; margin-left: 0px; font-family: Arial; font-size: 10pt; color: rgb(0, 0, 0);">
--</div>
<div style="direction: ltr; margin-right: 0px; margin-left: 0px; font-family: Arial; font-size: 10pt; color: rgb(0, 0, 0);">
Robert A. Cooper | Senior Lead Infrastructure Systems Engineer</div>
<div style="direction: ltr; margin-right: 0px; margin-left: 0px; font-family: Arial; font-size: 10pt; color: rgb(0, 0, 0);">
Infrastructure Systems Operations | Technology Services</div>
<div style="direction: ltr; margin-right: 0px; margin-left: 0px; font-family: Arial; font-size: 10pt; color: rgb(0, 0, 0);">
Texas A&M University<br>
1368 TAMU | College Station, TX 77843-1368<br>
ph: 979-862-1262 | racooper@tamu.edu<br>
IT.tamu.edu</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</body>
</html>