saml
saml copied to clipboard
Fix to allow IDP Initiated logins to not rely on inexistent tracked request cookie
Attempting to log in directly from the IDP fails due to the code searching for a cookie that is set by the SP before redirecting to the IDP.
In IDP Initiated logins, the SP never has a chance to set this cookie, so it does not exist when trying to log in, causing the request to fail.
This change will first check if the cookie exists, and if not then check if IDP initiated logins are allowed. If so, it'll set the redirect URI based on the passed Relay State.