In order to get SAML working I had to modify the sp plugin

For some reason during authentication it was looking for the saved ticket which doesn't get saved until after the authentication request is complete. So the saml identifier detects the saml request, but authentication doesn't let it through as a valid authentication. Not sure exactly what changed along the way and why this was not working.