A non-proceed event occurred while processing the request: NoPassive

[Glenn Wearen]

Hi
Our IdP keeps returning the following status...
...<saml2p:Status>
         <saml2p:StatusCode 
Value="urn:oasis:names:tc:SAML:2.0:status:Requester">
             <saml2p:StatusCode 
Value="urn:oasis:names:tc:SAML:2.0:status:NoPassive"/>
         </saml2p:StatusCode>
         <saml2p:StatusMessage>An error occurred.</saml2p:StatusMessage>
     </saml2p:Status>...
to authn messages like this...

<?xml version="1.0" encoding="UTF-8"?>
<samlp:AuthnRequest
AssertionConsumerServiceURL="https://ul-ie-primo.hosted.exlibrisgroup.com/primo_library/libweb/samlLogin"
     Destination="https://idp.ul.ie/idp/profile/SAML2/Redirect/SSO"
     ForceAuthn="false" ID="_d06894aead3e99aab42b66cdddddd6de14"
     IsPassive="false" IssueInstant="2018-01-03T16:32:16.030Z"
     Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
     <saml:Issuer 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://ul-ie-primo.hosted.exlibrisgroup.com/primo_library/libweb/353UOL</saml:Issuer>
     <saml2p:NameIDPolicy AllowCreate="true"
         Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
SPNameQualifier="https://ul-ie-primo.hosted.exlibrisgroup.com/primo_library/libweb/353UOL" 
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"/>
</samlp:AuthnRequest>
the logs show...

2018-01-03 16:32:16,290 - DEBUG 
[net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:144] - 
Profile Action ExtractSubjectFromRequest: No Subject 
NameID/NameIdentifier in message needs inbound processing
2018-01-03 16:32:16,296 - INFO 
[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:129] - Profile 
Action SelectAuthenticationFlow: Moving incomplete flow authn/Password 
to intermediate set
2018-01-03 16:32:16,296 - DEBUG 
[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:255] - Profile 
Action SelectAuthenticationFlow: No specific Principals requested
2018-01-03 16:32:16,297 - DEBUG 
[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:290] - Profile 
Action SelectAuthenticationFlow: No usable active results available, 
selecting an inactive flow
2018-01-03 16:32:16,297 - INFO 
[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:294] - Profile 
Action SelectAuthenticationFlow: No potential flows left to choose from, 
authentication failed
2018-01-03 16:32:16,298 - WARN 
[org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event 
occurred while processing the request: NoPassive
This confuses me, as it looks like the IdP is saying it doesn't support 
isPassive, but it wasn't asked for.
I'm using jaas based password auth and have the default settings in 
general-authn-config.xml as below...

         <bean id="authn/Password" parent="shibboleth.AuthenticationFlow"
                 p:passiveAuthenticationSupported="true"
                 p:forcedAuthenticationSupported="true" />

Does anyome have suggestions on what might be wrong here?
Regards
Glenn Wearen Middleware Services Manager HEAnet CLG, Ireland’s National 
Education and Research Network 1st Floor, 5 George’s Dock, IFSC, Dublin 
D01 X8N7, Ireland +353 (0)1 6609040 glenn.wearen at heanet.ie www.heanet.ie 
Registered in Ireland, No. 275301. CRA No. 20036270