Shibboleth SP & Okta IdP Redirect Looping

[Cantor, Scott]

And I'm sorry for all the misdirects and blind alleys, but this isn't generally why loops happen. IdPs pretty much do what they're told, they get a request and the response goes back to the ACS URL in the request or they refuse. Hardwiring them to respond to some arbitrary URL that's wrong is just not how things work.

It's much more common for the SP and Apache to be stepping on each other in weird ways than for an IdP to be this oddly behaved. It never occurred to me to ask, and you wouldn't know the obvious signs.

-- Scott