Livio Spring 374b9a7f66

fix(saml): provide option to get internal as default ACS (#8888) ...

# Which Problems Are Solved

Some SAML IdPs including Google only allow to configure a single
AssertionConsumerService URL.
Since the current metadata provides multiple and the hosted login UI is
not published as neither the first nor with `isDefault=true`, those IdPs
take another and then return an error on sign in.

# How the Problems Are Solved

Allow to reorder the ACS URLs using a query parameter
(`internalUI=true`) when retrieving the metadata endpoint.
This will list the `ui/login/login/externalidp/saml/acs` first and also
set the `isDefault=true`.

# Additional Changes

None

# Additional Context

Reported by a customer

2024-11-15 07:19:43 +01:00

..

idp_test.go

fix(saml): provide option to get internal as default ACS (#8888)

2024-11-15 07:19:43 +01:00