Several folks have reported this issue
opensaml::FatalProfileException
The system encountered an error
To report this problem, please contact the site administrator
Please include the following message in any email:
opensaml::FatalProfileException at (https://discourse.sci-gaia.eu/Shibboleth.sso/SAML2/POST)
Your client's current address (ip.addy.withheld.ok) differs from the one used when you authenticated to your identity provider. To correct this problem, you may need to bypass a proxy server. Please contact your local support staff or help desk for assistance.
This has happened to @BjornPehrson_47a0 and others from SWAMID, then some others from CESNET and now to people from GRNET. @MarcoFargetta_0c9b1 it seems like this issue was never resolved, but we need to take a look. I'm assured that these idps are working for other sps in edugain. Are we doing some wierd filtering in our config ?