In configuring the ShibbolethAuthentication against the University of Cambridge IdP using mod_shib I discovered multiple issues with NPEs. FindBugs identified some further errors. These always showed up as Authentication Failed in the Browser.
The errors where generated caused where a user had decided not to release attributes or the IdP did not have the attributes at all. A classic example being First Name.