You mark their SSN as not applicable. Which I have, but I am still getting the diagnostic error that I need a valid SSN or ITIN.
