You may need to wait until the US wakes up. But I would start by turning logging on net.shibboleth.idp.authn up to debug. Also the logging (if any) on your JAAS plugin. Rod