Let's talk about Brand Portal setups. I have seen an increase on the usage of Brand Portal. Which is Awesome! When you setup your Single Sign on for the Cloud this is for all products. One of the things that I would like you to factor in is if you intend to use Brand Portal. Brand Portal requires that you use the binding of RE-DIRECT rather than using HTTP-POST. If it is configured without using RE-DIRECT chances are your Brand Portal will not work.
Simple configuration adjustment in the Admin Console can save you some time and hardship.
Hope this helps!
Kerry Nelson