We have SSO through Shibboleth and DUO for two-factor authentication on our Moodle instances.

The first time a user adds a site and logs in, they are prompted to login to Shibboleth and authenticate just fine and are sent to the main page of the site in the app.

However, if the user logs out of the site, but does not delete it from the list of sites, and attempts to click the name to log back into the site, they are repeatedly prompted to login with Shibboleth, but are just sent back to the list of sites and never authenticated back in to view courses, etc.

If the site is deleted, then re-added, the user is able to log in and view the site successfully.

I have recorded a brief screen recording to demonstrate the behavior, since it won't be able to be replicated without an account in our system: https://mediaspace.appstate.edu/media/t/1_h55pd09v

I have tried changing the type of login setting to both embedded browser and browser window, and the same result occurs.

Please advise. Thank you!