Issue with SAML Auth Redirect.

I am having an issue with setting SAML auth with a vendor. The setup seems to be a standard SSO setup. Metadata has been exchanged and it seems we are authenticating enough to create a session, but on the Auth request redirect, things halt on our end. I spend time this morning with the vendor and this is what we found:

 

DISCOVER --> good

 

AUTHNREQUEST_SEND --> good

 

AUTHNREQUEST_REDIRECT --> good

 

However it stops there. At this point they have acknowledged the request and redirected to our F5 for authorization, but it never sends back to them.

 

The expected entries (after the above) for successful login would be:

 

AUTHNREQUEST_SEND <--

 

LOGIN ---

 

LOGIN_SESSION ---

 

ACCESS ---

 

TIMEOUT --- 127.0.0.1

 

Any insight into this would be appreciated.

 

Thanks,

 

Mike Drennen