Scott Munro

I don't have much experience with SAML so please correct me if I have anything wrong. From what I understand, signing requests that are sent to identity providers is optional...

The current default is currentUri which does not seem like the best choice if a value for RedirectAfterLogin is available. I was expecting the browser to be redirected to RedirectAfterLogin...