Can you output the credentials in your program? And then try looking at sts directly to see the root cause?