title: Shibboleth SSO CORS error
body: <p>Our app(AngularJS + REST) is protected by Shibboleth service provider for SSO. 
  The issue is we are seeing CORS errors when trying to make ajax calls for the REST services, saying the redirect to IDP failed "Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at"</p>
  
  <p>However if we refresh/reload the browser everything works fine. I believe the cookie is not created first time around, and got created after force reload. </p>
  
  <p>Obviously this is not acceptable solution to refresh the browser every single time.</p>
  
  <p>What needs to be done in order to make this work without reload? </p>
  
  <p>Thanks for any pointers in advance.   </p>