This does not look like STS error, when you say the other tools work have you tested with KBA 1767629? Typically what appears to be SSO working is a caching mechanism called secondary credentials. Unless 1767629 confirms STS is working SSO may only appear to be working and STS needs to be reconfigured.
Regards,
Tim