Idp 3.2.1 -> 3.3.1 authentication flow problem

[Jukka Hakosalo]

Hello,

We are trying to update idp 3.2.1 to 3.3.1.
Installing goes ok.
Older version is working fine.

When we try to log in SP gives an error message:
-------------------------
opensaml::FatalProfileException
The system encountered an error at Tue Mar 28 12:03:55 2017

Please include the following message in any email:

opensaml::FatalProfileException at
(https://sippo.oulu.fi/Shibboleth.sso/SAML2/POST)
SAML response reported an IdP error.
Error from identity provider:

Status: urn:oasis:names:tc:SAML:2.0:status:Requester
Sub-Status: urn:oasis:names:tc:SAML:2.0:status:AuthnFailed
Message: An error occurred.
---------------------------

In idp-warn-log:
---------------------------
2017-03-28 12:03:54,990 - WARN
[net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:198] - Profile
Action PopulateAuthenticationContext: No authentication flows are active
for this request
-----------------------------

In idp-process-log:
----------------------------
2017-03-28 12:03:54,990 - WARN
[net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:198] - Profile
Action PopulateAuthenticationContext: No authentication flows are active
for this request
2017-03-28 12:03:55,032 - INFO
[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:294] - Profile
Action SelectAuthenticationFlow: No potential flows left to choose from,
authentication failed
2017-03-28 12:03:55,375 - INFO [Shibboleth-Audit.SSO:241] -
20170328T090355Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_b538617b2e92428b2a5b1e49de0ffcff|
https://sippo.oulu.fi/shibboleth-sp|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://login-dev.oulu.fi/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_1a23e123716d88b959261671c3803782|||||
------------------------------

When we copy 3.2.1 back everything works. We use JAAS authentication.
Where should I start to find the solution?

Thanks,
Jukka
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170412/3129a8cc/attachment.html>