Seen the following behaviour with PL 2.5.3.Beta2 and 2.5.3.Final in EAP 6.3.0.DR1 builds.

When accessing a service provider (SP) using URL which does not point to the SP root, the redirects caused by IdP authentication lose part of the actual URL and only redirect back to the root of SP. This happens in the following scenario:

1) Access SP using URL which retrieves a document in the SP context, e.g. /sp/printRoles. No authentication in IdP happened before.

Actual behaviour:
- The SP root document, i.e. /sp/ is retrieved

Expected behaviour:
- Requested document, i.e. /sp/printRoles is retrieved.

Strange enough, the redirection from SP to IdP is performed _twice_ in the session.