saml icon indicating copy to clipboard operation
saml copied to clipboard

Fix to allow IDP Initiated logins to not rely on inexistent tracked request cookie

Open chrisrollins65 opened this issue 3 years ago • 0 comments

Attempting to log in directly from the IDP fails due to the code searching for a cookie that is set by the SP before redirecting to the IDP.

In IDP Initiated logins, the SP never has a chance to set this cookie, so it does not exist when trying to log in, causing the request to fail.

This change will first check if the cookie exists, and if not then check if IDP initiated logins are allowed. If so, it'll set the redirect URI based on the passed Relay State.

chrisrollins65 avatar Oct 01 '22 11:10 chrisrollins65