In case you don't see the bug update I filed, I think your error is that you have injected an alternate lookup function to locate the AttributeContext: p:attributeContextLookupStrategy-ref="shibboleth.ChildLookup.PreRequestedAttributeContext" It's in your predicate. Try removing that. -- Scott