Hello
1. Check SLC and SLS traces file (after reproducing the issue)? If you can't identify root cause, you can attach the logs here.
2. Which version of NWSSO you're currently using (SP and PL from SLC and SLS);
3. Which Login Module are you using?
4. In your client profile configuration in SLS, please check:
a. Which value has the parameter PSE Type;
b. Which value has the parameter Auto-Enroll;
Cheers,
Tapan