...
- Check that the login_uri parameter of your authData object is set to 'InCommon'.
-32 = The two phrase should be the same
...
-32 = The two phrase should be the same!
- Check your revocation phrase ('phrase' parameter). It appears that it cannot be left as empty string.