Actually, my second post I thought would provide insight into the primary issue of this ticket. I am not, at present, interested in a resolution to that, per se.
To re-state: the SCIM-Client, when trying to connect to the UMA endpoint for an AAT gets an "invalid cryptographic segment" exception. I believe I have everything set up appropriately. The second post was to suggest (if it bears any weight) that some service may not be started that should be started.