Root sites require exclusion of /Shibboleth.sso* to prevent Drupal mod_rewrite rules from rewriting that path to become index.php?q=Shibboleth.sso* and thus missing the hit to the Shibboleth Apache module.
ISU shibboleth module
.htaccess file for shibboleth