In this situation this issue ended up being the customers environment was such that a large number of cookies were being set in the users browser before they went to the SBM login page. When the user got redirected to the SBM login screen they would get redirect to the IDP url and would see a "Bad Request" error instead and couldn't login.
If you are using Java in a form and you are calling a URL you may be presented the follow error. "If you leave SBM, go to another transition or use this transition for an other item your form data will be lost" The seems to only happens if you are using IE as your browser.
The setup is configured in the IIRF.INI. There are two of these files in an SBM setup. One in the web site root directory (c:\inetpub\wwwroot, by default), and one in the [SBM]\Application Engine\Bin directory.
When going to the work center login screen (such as http://localhost/workcenter), the browser will redirect to the full workcenter URL (such as http://localhost/workcenter/tmtrack.dll?shell=swc). However, then the browser returns:
will not be preserved on upgrade. Below is an example email template that will redirect the URL to the ALM shell instead of the classic SBM view. Notice the "shell=alm" section in the URL line.
To resolve the double logon, the exit page url should be left blank so that the user gets redirected to the default SBM exit page. Open the SBM System Administrator Go to Options > Settings > Database Tab
