Method AbstractSTSLoginModule.createWSTrustClient always use STSClientPool to create an STSClient. However, STSClientFactory.getInstance() returns null in no-pool configuration, while I didn't find anyone calling STSClientFactory.setInstance in picketlink.