You're on Java > 8. It's a Java bug with no likely fix at present. The workaround will be made the default in the next IdP patch and all future versions. https://wiki.shibboleth.net/confluence/display/IDP30/LDAPonJava%3E8 Virtually nobody has been testing or moving past Java 8 so there's very little awareness of the issue. -- Scott