IdP 4.1 OIDC error after upgrade

Tue Jul 13 14:36:05 UTC 2021

Hi, all,

I'm pretty sure I'm missing something obvious here. After an upgrade to IdP 4.1 and a migration to the OIDC plugin, I'm seeing this in our logs when certain OIDC clients send users to authenticate:

2021-07-13 09:05:23,474 - ERROR [net.shibboleth.idp.plugin.oidc.op.profile:-1] - Uncaught runtime exception - [session=DF199ED067BA5399EFAAEF3CD1FAE026] [ip=73.22.31.212] java.lang.NullPointerException: null\n	at net.shibboleth.idp.plugin.oidc.op.token.support.TokenClaimsSet.isConsentEnabled(TokenClaimsSet.java:491)

And the client is not getting back some or all attributes. In fact, looks like the client is getting back a 400 response.

Any clues?

Keith