Cirrus
EmployeeThe way it's written, it seems like it will always send a redirect response. I assume you probably would like it to NOT redirect sometimes.
In what way do you want the BIG-IP tell the difference between when you want it to redirect and when you don't?
CirrusThe original policy was designed for it to always redirect to the SSO path. It should always strip whatever path is there and append the SSO path. I can't imagine that would cause the too many redirects. I'm assuming there is something wrong that is causing an https/http loop, but I am not proficient enough in writing tcl to know if there is an error in the code.