If shib login fails this results in a redirect loop, but I'm not sure if that ever actually happens?