NetIQ Access Management 3.1 SP4 IR1
The background is in a saml2 federation where a user is provisioned and then the password needs to be retrieved by the password fetch method that was defined as a post authentication method.
It failed to retrieve the password the first time.
On subsequent attempts it was working fine.
Fix is available in 3.1 SP5.