Tomcat 8 and Shibboleth infinite loop at login
 

I've deployed a war file into Tomcat 8 and am attempting to hook up authentication with Shibboleth. When I go to my login page, my Shib IdP accepts my credentials with apparent success, but then I get redirected infinitely between Shibboleth IdP and my Tomcat application.

The only error I have come across so far is the below in the Tomcat logs. Bumping the logging level all the way up doesn't generate any further detail. Would appreciate any thoughts/advice.

26-Apr-2016 18:54:42.724 SEVERE [http-nio-8085-exec-55] org.apache.catalina.core.StandardWrapperValve.invoke Servlet.service() for servlet [default] in context with path [/myApp] threw exception
groovy.lang.MissingMethodException: No signature of method: org.opensaml.xml.schema.impl.XSAnyImpl.getValue() is applicable for argument types: () values: []
Possible solutions: getClass(), getAt(java.lang.String), detach(), getDOM(), getParent()
at org.codehaus.groovy.runtime.ScriptBytecodeAdapter.unwrap(ScriptBytecodeAdapter.java:56)
at org.codehaus.groovy.runtime.callsite.PojoMetaClassSite.call(PojoMetaClassSite.java:46)
at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:45)
at org.opensaml.xml.schema.XSString$getValue.call(Unknown Source)
cont...

Every time I've set up Shibboleth eventually ending with Tomcat, I've had to use Apache reverse-proxy since there wasn't (isn't?) an SP written to interface directly with Tomcat. The Apache setup is pretty straightforward, have you tried that?

https://wiki.shibboleth.net/confluen...eSPJavaInstall