Have you made any changes to the web.xml in workspace war. Normally on SSO failure in workspace, it should redirect to /workspace/Main.html and show its login screen.
We have modified the ui of the workspace, however, the source_url and logoin_url remain unchanged (i.e. /workspace/Main.html).
we have run a capture on the redirect behaviour
item 5-20 is the redirect flying around,
and item 21 we input the URL input in the browser explicitly, and it could show the page and the same user can login successfully, this make us really difficult to find out why it would happen.
Please share your email address with us.