SSO Redirect Loop

[Matthew X. Economou]

Scott Cantor writes:

> There are an essentially infinite set of causes, all unique to every
> different situation. There's no way anybody can diagnose it from the
> outside, other than by actually hitting those URLs and tracing, and
> seeing the logs, the latter being impossible for anybody outside to
do.

Just to re-iterate what Scott said here, you really need to run this
under a debugger in order to see what's going on in detail.  Otherwise,
we all just end up wasting our time guessing.  This morning I
successfully diagnosed an authentication problem similar to yours that
was caused by a missing claim, but I only caught it by effectively
MitM-ing myself and watching everything my browser did as it looped
through the federated logon process.  I usually use the SAML Tracer
plugin for Firefox
(https://addons.mozilla.org/en-US/firefox/addon/saml-tracer/), but I'm
starting to use Fiddler more often (http://www.telerik.com/fiddler).
I'm sure everyone here could recommend their favorite debugger if you
asked.

Best wishes,
Matthew

-- 
"The lyf so short, the craft so longe to lerne."