What type of auth does it use? If it is forms-based, is everything required in the POST static? Which failure are you seeing? If you look at the policy trace (taken for POST only), are you seeing the policy apply? Does the dsRecord show the POST attempt? Would it be possible to attach a dsrecord WITHOUT the SSO policy configured so we can look at the authentication?
... View more