<div dir="ltr">We're prepping for our upgrade to IdP v3.1.2.  I've noticed something confounding.<div><br></div><div>My normal everyday browser is Chrome on OSX.  All the google apps seem to work find (mail, drive, docs, sheets, slides, etc)... and everything *seems* to work fine from my windows 7 VM (IE, FF, Chrome)</div><div><br></div><div>But... if I try safari or FF in OSX, from the chrome launcher, I can access "My Account", "Search", "Google+", "Mail", "Calendar", "Sites", "Groups", and "Contacts".    "Drives", "Docs", "Sheets" and "Slides" all send the browser into an authentication loop.</div><div><br></div><div>Accesses from chrome seem to generate a single authentication event.  I see the initial authentication in idp-process.log.  I do not see further traffic if I go to additional google apps.</div><div><br></div><div>Accesses from FF, Safari - the browser goes through a loop, requesting the same stuff over and over again.  Here's a fun entry from my idp-process.log:</div><div><br></div><div><div>2015-09-28 10:21:54,714 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:220] - Setting RelayState parameter to: '<a href="https://accounts.google.com/CheckCookie?continue=https%3A%2F%2Fdrive.google.com%2Faccounts%3FcontinueUrl%3Dhttps%253A%252F%252Fdrive.google.com%252F%253Ftab%253Dwo%2526authuser%253D1%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%23&followup=https%3A%2F%2Fdrive.google.com%2Faccounts%3FcontinueUrl%3Dhttps%253A%252F%252Fdrive.google.com%252F%253Ftab%253Dwo%2526authuser%253D1%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti&service=wise&ltmpl=drive">https://accounts.google.com/CheckCookie?continue=https%3A%2F%2Fdrive.google.com%2Faccounts%3FcontinueUrl%3Dhttps%253A%252F%252Fdrive.google.com%252F%253Ftab%253Dwo%2526authuser%253D1%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%23&followup=https%3A%2F%2Fdrive.google.com%2Faccounts%3FcontinueUrl%3Dhttps%253A%252F%252Fdrive.google.com%252F%253Ftab%253Dwo%2526authuser%253D1%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti%26urp%3Dhttps%253A%252F%252Fdrive.google.com%252Faccounts%253Fauthuser%253D1%2526conti&service=wise&ltmpl=drive</a>', encoded as 'https&#x3a;&#x2f;&#x2f;<a href="http://accounts.google.com">accounts.google.com</a>&#x2f;CheckCookie&#x3f;continue&#x3d;https&#x25;3A&#x25;2F&#x25;<a href="http://2Fdrive.google.com">2Fdrive.google.com</a>&#x25;2Faccounts&#x25;3FcontinueUrl&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252F&#x25;253Ftab&#x25;253Dwo&#x25;2526authuser&#x25;253D1&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;23&amp;followup&#x3d;https&#x25;3A&#x25;2F&#x25;<a href="http://2Fdrive.google.com">2Fdrive.google.com</a>&#x25;2Faccounts&#x25;3FcontinueUrl&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252F&#x25;253Ftab&#x25;253Dwo&#x25;2526authuser&#x25;253D1&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&#x25;26urp&#x25;3Dhttps&#x25;253A&#x25;252F&#x25;<a href="http://252Fdrive.google.com">252Fdrive.google.com</a>&#x25;252Faccounts&#x25;253Fauthuser&#x25;253D1&#x25;2526conti&amp;service&#x3d;wise&amp;ltmpl&#x3d;drive'</div></div><div><br></div><div><br></div><div>any ideas?</div><div>Liam</div></div>