IIS7 with SP-Plugin, authentication infinite loop

[Cantor, Scott]

Your bug is that you've violated the cardinal rule: The handlerURL MUST
map to the same applicationId as the resources its associated with.

>             <Host name="idefix.worldtalk.de" scheme="https" port="82">
>                 <Path name="RoleManager" applicationId="RoleManager"
>authType="shibboleth" requireSession="true" exportAssertion="true"/>
>             </Host>
>

You overrode /RoleManager as a path, but your handlers remain rooted at
/Shibboleth.sso. That means the session is created for the default
applicationId, and then your request is mapped to an override.

There's no obvious reason why you're creating an override at all, but if
you need one, refer to the NativeSPApplicationModel and related topics on
how to do that.

-- Scott