session not sticky or something else?

[Christopher Bongaarts]

Your resolver looks OK.   Check your IdP audit logs to see if you are 
releasing more than one attribute that encodes to NameID.  Also, you 
could post your bean definition for TransientIDDataSealer that you would 
have added to internal.xml.

On 1/8/2013 1:50 PM, Nickles, Brent wrote:
>
> 14:38:53.518 - ERROR [edu.internet2.middleware.shibboleth.common.util.DataSealer:379] - Given final block not properly padded
> 14:38:53.519 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml1.AbstractSAML1ProfileHandler:563] - Error resolving principal name for SAML request from relying party 'https://libraries.umd.edu/pdst-hs/sp'. Cause: Caught exception unwrapping principal identifier.
>

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%