SAML message intended destination endpoint did not match the recipient endpoint

[Cantor, Scott]

I couldn't say this is a cause, but in the past when I've seen really odd behavior associated with particular SPs (usually replay) it's been due to CDNs hosting the SPs.

Dunno, just a thought.

-- Scott