Scripted Attribute Resolver ClassNotFoundException

[Cantor, Scott]

> I attempted to put the same jars in tomcat's lib directory and while that
> allowed me to get past this line without a ClassNotFoundException, java /
> tomcat quickly takes up all system memory, so I'm assuming that's NOT the
> right answer.

That doesn't suggest a healthy or working system regardless...

> Curiously the nashorn interpreter doesn't throw an exception on the
> BouncyCastleProvider line, which comes from the same set of jars.

The IdP already depends on Bouncy Castle. Therefore, my guess is that you're trying to use a conflicting version of it.

The JCE already provides that algorithm, via a standard API, so the obvious workaround would be to use JCE calls.

-- Scott