There seems to be some unexplained interaction between the fix for the session cookies not getting SameSited in SAML in 5.1.3 and the OP plugin. One or the other is broken in both versions, but if you use the OP, you're better off on 5.1.2 for now until we figure out which piece is at fault and get one or the other patched. -- Scott