diff --git a/testbed/authentication/shibboleth-idp/Dockerfile b/testbed/authentication/shibboleth-idp/Dockerfile
index 2b10847f0..ed663d8b5 100644
--- a/testbed/authentication/shibboleth-idp/Dockerfile
+++ b/testbed/authentication/shibboleth-idp/Dockerfile
@@ -1,4 +1,4 @@
-FROM tier/shib-idp:4.0.0_20200518
+FROM i2incommon/shib-idp:4.2.1_20220624
 
 # The build args below can be used at build-time to tell the build process where to find your config files.  This is for a completely burned-in config.
 ARG TOMCFG=config/tomcat
diff --git a/testbed/authentication/shibboleth-idp/config/shib-idp/conf/relying-party.xml b/testbed/authentication/shibboleth-idp/config/shib-idp/conf/relying-party.xml
index 5127515ed..f216e2f5e 100644
--- a/testbed/authentication/shibboleth-idp/config/shib-idp/conf/relying-party.xml
+++ b/testbed/authentication/shibboleth-idp/config/shib-idp/conf/relying-party.xml
@@ -40,7 +40,7 @@
                 <ref bean="SAML1.AttributeQuery" />
                 <ref bean="SAML1.ArtifactResolution" />
                 -->
-                <bean parent="SAML2.SSO" p:postAuthenticationFlows="attribute-release" />
+                <ref bean="SAML2.SSO" />
                 <ref bean="SAML2.ECP" />
                 <ref bean="SAML2.Logout" />
                 <!--