Issue
When users authenticate to the AuthPoint IdP portal from the Firefox browser, they might be redirected to the authentication page after they successfully complete MFA. After they log in and complete MFA a second time, the authentication succeeds. This behavior occurs when there is an expired SAML authentication cookie in Firefox. When expired AuthPoint cookies are not deleted in Firefox, the first authentication attempt fails with the expired authentication cookie. The second authentication uses a new cookie and is successful.
Workaround/Solution
No workaround exists at this time. Firefox users can mitigate the impact if they log out of their SAML session when they are finished.