SP error - client address differs

[Jeff McCullough]

Hi,

I’m working with an SP that has at least a 4 year old version of the Shibboleth SP software running. They were using a discovery service version (ds-1.1.1) that is no longer available. The person who did the original Shib setup is no longer around, and the server owners unfortunately stored the credentials to admin the server in the their wiki which is no longer accessible. I tried using IDP Initiated SSO to authenticate, but I get this error:

opensaml::FatalProfileException at (https://spaces.ebi.berkeley.edu/Shibboleth.sso/SAML2/POST)

Your client's current address (73.222.98.228) differs from the one used when you authenticated to your identity provider. To correct this problem, you may need to bypass a proxy server. Please contact your local support staff or help desk for assistance.

I’m confident that the IP is the same though. 

I searched and found some references to checkAddress config change in the SP, but am wondering if there may be something I can change on the IDP to work around the issue. We upgraded 2.3.8 to 3.3.1, and their config did work with the previous version. Is there any configuration change I can make. As I can’t change the SP, I’m just looking for a temporary solution that I can do outside it. 

Thanks,
Jeff