<div dir="ltr">Hello,<br><br>We are trying to update idp 3.2.1 to 3.3.1. <br>Installing goes ok.<br>Older version is working fine. <br><br>When we try to log in SP gives an error message:<br>-------------------------<br>opensaml::FatalProfileException<br>The system encountered an error at Tue Mar 28 12:03:55 2017<br><br>Please include the following message in any email:<br><br>opensaml::FatalProfileException at<br>(<a href="https://sippo.oulu.fi/Shibboleth.sso/SAML2/POST">https://sippo.oulu.fi/Shibboleth.sso/SAML2/POST</a>)<br>SAML response reported an IdP error.<br>Error from identity provider:<br><br>Status: urn:oasis:names:tc:SAML:2.0:status:Requester<br>Sub-Status: urn:oasis:names:tc:SAML:2.0:status:AuthnFailed<br>Message: An error occurred.<br>---------------------------<br><br>In idp-warn-log:<br>---------------------------<br>2017-03-28 12:03:54,990 - WARN [net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:198] - Profile Action PopulateAuthenticationContext: No authentication flows are active for this request<br>-----------------------------<br> <br>In idp-process-log:<br>----------------------------<br>2017-03-28 12:03:54,990 - WARN [net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:198] - Profile Action PopulateAuthenticationContext: No authentication flows are active for this request<br>2017-03-28 12:03:55,032 - INFO [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:294] - Profile Action SelectAuthenticationFlow: No potential flows left to choose from, authentication failed<br>2017-03-28 12:03:55,375 - INFO [Shibboleth-Audit.SSO:241] - 20170328T090355Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_b538617b2e92428b2a5b1e49de0ffcff|<a href="https://sippo.oulu.fi/shibboleth-sp|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://login-dev.oulu.fi/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_1a23e123716d88b959261671c3803782|||||">https://sippo.oulu.fi/shibboleth-sp|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://login-dev.oulu.fi/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_1a23e123716d88b959261671c3803782|||||</a><br>------------------------------<br><br>When we copy 3.2.1 back everything works. We use JAAS authentication.<br>Where should I start to find the solution?<br><br>Thanks,<br>Jukka<br></div>