On 4/16/14, 6:41 PM, "cneberg" <cneberg at gmail.com> wrote: >Any suggested workarounds? There are none I know of. Short of detecting it somehow in front of the IdP with a proxy or something and even then you'd have to fail it or bottleneck/delay it to avoid the race. -- Scott