Hi Dan,
Your problem is most likely with list and order of login modules you've added to 'ticket'.
Try this order:
EvaluateTicketLoginModule SUFFICIENT
SAML2LoginModule OPTIONAL
CreateTicketLoginModule OPTIONAL
BasicPasswordLoginModule REQUISITE
CreateTicketLoginModule OPTIONAL