> Given that this is production, any way we > can troubshoot further, or any other suspects? If it is an attribute resolution problem, the AACLI may help you troubleshoot. https://wiki.shibboleth.net/confluence/display/SHIB2/AACLI