Users intermittently land on WAYF page

[Peter Schober]

* Mike Flynn <shibbolethlynda at yahoo.com> [2015-03-12 20:47]:
> ALL of my clients use an SP link with the entityID embedded so WAYF
> is not needed.  When a user manages to strip the entityID out of the
> URL, they land on the WAYF page as expected.
> This customer gets to the WAYF page after they send the assertion
> back to me.  What might be wrong in the assertion that would make
> Shib send them to WAYF like that?  The assertion is encrypted and I
> know the issue is on their side (as do they) - They are looking for
> some guidance as to where to look...

That sounds to me like the IDP sends the response to some protected
part of your site, instead of to your ACS URLs. You could verify that
(or rule it our) from your webserver's access logs.
-peter