We have an association that intermittently is getting SPEntityID null after the Authentication Policy (redirect to login). HTTPFox show in the content tab some java script with the Encoded SAML containing the Entity ID when it works, when it fails, the content tab is blank. I am not sure where HTTPFox populates the content tab from and if this missing 'content' is the reason for the error (most likely). So knowing where FIM looks for the Entity ID could point me in the right direction.
