Org Identity affiliation is not required to be a CO Enrollment Attribute (although CO Person Role affiliation is), so when an identity is enrolled the affiliation can be blank. However, if the Org Identity is subsequently edited, the affiliation is now a mandatory field (ie: cannot be blank).

affiliation should be made consistent (either always optional or always required).