Advanced Services can't connect to interna vCO due to SSO Token issue

I think this has to due with the fact that this vCAC used to be configured to point at an external vCO, but we changed it to use the internal vCO. Now, when I try to create service blueprint, via the Advanced Services, or any other thing that calls down to the vCO backing the Advanced Services, it blows up saying it can't reach to the vCO. That's the error reported in the vCAC CAFE UI.

In the vCO logs, I see a lot of issues with tokens. Here's an example. It's complaining about the delegate token, which I don't really understand very well; minimal SSO knowledge unfortunately.

*******

2014-10-17 14:22:05.059-0400 [http-bio-0.0.0.0-8281-exec-4] WARN {} [AbstractClient] Possible remote API mismatch detected. Operation will continue, but errors are likely.

2014-10-17 14:22:05.059-0400 [http-bio-0.0.0.0-8281-exec-4] WARN {} [AbstractClient] ******* WARNING ****** WARNING ****** WARNING *******

2014-10-17 14:22:05.059-0400 [http-bio-0.0.0.0-8281-exec-4] INFO {} [AdminClientImpl] Client was created successfully

Oct 17, 2014 2:22:05 PM org.apache.catalina.core.StandardWrapperValve invoke

SEVERE: Servlet.service() for servlet [restServlet] in context with path [/vco] threw exception

com.vmware.o11n.security.NotDelegateTokenException: Passed token is not Delegated for vCO

at com.vmware.o11n.security.session.SessionManager.registerDelegateTokenFor(SessionManager.java:230)

at sun.reflect.GeneratedMethodAccessor228.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

at java.lang.reflect.Method.invoke(Unknown Source)

at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:319)

at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183)

at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)

at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:110)

at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)

at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)

at com.sun.proxy.$Proxy64.registerDelegateTokenFor(Unknown Source)

at com.vmware.o11n.security.impl.VcoSecurityServiceImpl.registerDelegateTokenFor(VcoSecurityServiceImpl.java:120)

at com.vmware.o11n.web.auth.http.DelegateTokenAuthenticationFilter.processToken(DelegateTokenAuthenticationFilter.java:118)

at com.vmware.o11n.web.auth.http.DelegateTokenAuthenticationFilter.doFilter(DelegateTokenAuthenticationFilter.java:81)

at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

at com.vmware.o11n.web.auth.http.TokenAuthenticationFilter.doFilter(TokenAuthenticationFilter.java:102)

at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)

at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

at org.springframework.security.web.access.channel.ChannelProcessingFilter.doFilter(ChannelProcessingFilter.java:144)

at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)

at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)

at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)

at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)