<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Howdy!</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
I am currently trying to troubleshoot a data release issue between my university and NSF/research.gov. From what I have gathered, we are not the only institution having this issue.</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
What it comes down to is that an individual who selects to use InCommon for their research.gov login, ends up not getting both the InCommon attributes released, but the IdP is also matching on our Research and Scholarship (RandS) attribute policy. The policies
both release an attribute that matches the OID for mail, one as 'mail' and the other as 'email'. At some point these attributes are getting merged to give mail multiple values, which is breaking the authentication flow at research.gov.</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
These are our filter policies for each:</div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
<AttributeFilterPolicy id="InCommonFederationDefaultRelease"></div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
<PolicyRequirementRule xsi:type="OR"></div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
<Rule xsi:type="InEntityGroup" groupID="urn:mace:incommon" /></div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
<Rule xsi:type="EntityAttributeExactMatch"</div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
attributeName="source_of_metadata"</div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
attributeValue="incommon-mdq"/></div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
</PolicyRequirementRule></div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
<AttributeFilterPolicy id="releaseToRandSBundle"></div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
<PolicyRequirementRule xsi:type="EntityAttributeExactMatch"</div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
attributeName="http://macedir.org/entity-category"</div>
<div class="elementToProof" style="line-height: 22px; font-family: "Aptos Mono", "Aptos_EmbeddedFont", "Aptos_MSFontService", monospace; font-size: 10pt; color: rgb(0, 0, 0);">
attributeValue="http://refeds.org/category/research-and-scholarship" /></div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
I fixed a similiar issue last year for another entity by creating an explicit deny rule for the email attribute, but I'd like to figure out a more general solution that doesn't require tacking on each entityID as we come across the broken ones. Has anyone
else experienced this, or have any suggestions that might provide a fix?</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Thanks,</div>
<div style="font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
RobertC</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div id="Signature">
<div id="divtagdefaultwrapper"></div>
<div style="direction: ltr; margin-right: 0px; margin-left: 0px; font-family: Arial; font-size: 10pt; color: rgb(0, 0, 0);">
--</div>
<div style="direction: ltr; margin-right: 0px; margin-left: 0px; font-family: Arial; font-size: 10pt; color: rgb(0, 0, 0);">
Robert A. Cooper | Senior Lead Infrastructure Systems Engineer</div>
<div style="direction: ltr; margin-right: 0px; margin-left: 0px; font-family: Arial; font-size: 10pt; color: rgb(0, 0, 0);">
Infrastructure Systems Operations | Technology Services</div>
<div style="direction: ltr; margin-right: 0px; margin-left: 0px; font-family: Arial; font-size: 10pt; color: rgb(0, 0, 0);">
Texas A&M University<br>
1368 TAMU | College Station, TX 77843-1368<br>
ph: 979-862-1262 | racooper@tamu.edu<br>
IT.tamu.edu</div>
</div>
</body>
</html>