CAS with shib 3

[Pablo Vidaurri]

I am trying to do SSO using CAS and having shib 3 as SAML provider. I have
setup the cas plugin as outlined in
https://github.com/Unicon/shib-cas-authn3

When testing, I am being redirected to my CAS sso login page. I am seeing a
successful login and tickets being generated on the CAS side. But when I
get sent back to shib I am getting an error::
 ---------------------------------

opensaml::FatalProfileException at (
https://sp.testshib.org/Shibboleth.sso/SAML2/POST)

SAML response reported an IdP error.

Error from identity provider:

*Status:* urn:oasis:names:tc:SAML:2.0:status:Requester
*Sub-Status:* urn:oasis:names:tc:SAML:2.0:status:AuthnFailed
*Message:* An error occurred

 ---------------------------------

Am I missing anything in the config?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180720/617cf256/attachment.html>