redirect loop question

[Mike Flynn]

I have an ADFS IDP that connects to my Shib SP.  Recently they were getting a signing error out of the blue...  So, they re-loaded my metadata and I did the same and the signing error went away but now what we see is this:

Using SP initiated link, they are challenged for credentials.
>After entering the credentials they get a redirect loop error on the browser.  In a trace I see it bouncing between 2 requests on their side:
>If they hit the SP initiated link again, they end up on my site logged in just fine.
>
>So I would guess that metadata is not the issue since it correctly authenticates after the redirect loop stops and they re-attempt the connection.

In a fiddler trace I see it bouncing between these 2:

17302HTTPSadfs.customerdomain.com/adfs/ls/auth/integrated/?SAMLRequest=<request here>
18302HTTPSadfs.customerdomain.com/adfs/ls/?SAMLRequest=<request here>

I know this is the Shib lstSrv and I am asking partially about ADFS here.  If you think this question is not appropriate for the list, feel free to respond to me directly instead of on the list here.

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131104/d3b40ed5/attachment-0001.html