...
SSO may deny an authentication request with "Access Denied" if the request has ForceAuthn flag set and the user has an existing authentication session open already. We have a development ticket open for this: IDS-947.
Requirement for High Entropy in Enterprise Linux
Fixed for 8.3.4 and newer.
Applies only 8.3.2 and 8.3.3.
Running the setup.sh for Enterprise Linux requires high system entropy.