saml post

apps/login/src/app/login/route.ts

@@ -215,11 +215,24 @@ export async function GET(request: NextRequest) {
                 new URLSearchParams(params),
             },
           }).then((resp) => {
-            if (
+            if (resp.nextStep.case === "authUrl" && resp.nextStep.value) {
-              resp.nextStep.value &&
-              typeof resp.nextStep.value === "string"
-            ) {
               return NextResponse.redirect(resp.nextStep.value);
+            } else if (
+              resp.nextStep.case === "postForm" &&
+              resp.nextStep.value
+            ) {
+              const postCall = resp.nextStep.value;
+
+              const redirectUrl = constructUrl(request, "/saml-post");
+
+              redirectUrl.searchParams.set("url", url);
+              redirectUrl.searchParams.set("RelayState", postCall.relayState);
+              redirectUrl.searchParams.set(
+                "SAMLResponse",
+                postCall.samlResponse,
+              );
+
+              return NextResponse.redirect(redirectUrl.toString());
             }
           });
         }

apps/login/src/lib/zitadel.ts

@@ -962,7 +962,6 @@ export async function startIdentityProviderFlow({
   urls,
 }: {
   serviceUrl: string;
-
   idpId: string;
   urls: RedirectURLsJson;
 }) {