Pending more detail from Scott and Marvin .... Is there anything 'interesting' about your network set up (multiple network adaptors or something such that SAML requests come in one another adaptor and the CAS another)? AFAICS The SessionManager isn’t finding the IdP cookie so I'd be suspicious that something has stripped in out. R