Hello,

I am trying to reverse engineer a setup for a federation while at the same time trying to get a better understanding of federations in ISVA. Currently, I have a federation that is mapped to a mapping rule that is not linked any other mapping rule. When using the application that is connected to that federation it feels as if other mapping rules are also used, but I cannot find where they are linked to that federation (or somewhere else).  The reason I suspect that some other mapping rule is used is because I got access to the Git repo where the mapping rule (that is used in the federation) is located, but it contains also other mapping rules which kind of does what is represented in the logs. For example, I see that a certain adfs user and some email formats is used in the logs, which is exactly what the mapping rule adjacent to the one which is used in the federation does. The issue from the client perspective is that a certain e-mail format is used, which is not specified in the mapping rule linked to the federation (but that e-mail format is used in the "unused" mapping rule). As mentioned, I see no reference to any other mapping rules inside the federated mapping rule and I can verify that the federation is linked to the correct mapping rule. 

Do you have any idea what the problem is or strategy how to solve it? 

ISVA federations allow mapping rules to be attached at both the federation level, and on a per-partner basis, with the per-partner mapping rule taking precedence. 

Be sure to check the partner configuration for the SSO you are performing to determine if that is the active mapping rule. This might explain your observations.