In the URL when testing SSO, if something goes wrong you’ll get an errorReason=X, the reason codes are listed here:
errorReason Error
0 Your user permissions do not authorize you to access this page.
1 The user name and password combination you entered does not correspond to a registered user.
2 The password you have entered is invalid.
3 Your account has been locked. Please contact your System Administrator.
4 Your account has been deleted. For further details, please contact your System Administrator.
5 Your account has expired. Please contact your System Administrator.
6 Invalid assertion.
7 Please provide a user name and a password.
8 You cannot access this product since you belong to no group. Please contact your System Administrator.
9 Invalid answer to secret question.
10 Your account has been deactivated. Please contact your System Administrator to reactivate it.
11 Your password is expired.
92 cookies unavailable
95 signature verification failed for provider ID
103 Assertion timeout / expired