#10 /tokenservice/iam/ in SecurityTokenServices API has been changed to /tokenservice/iam/
Will now "kick out" users from /sso/welcome/ with a HTTP401 unless they enter some data into the necessary fields. We have no way of checking the validity of trying to arrive at this webpage.