SSO saml2-assertion-consumer-service


#1

Matrix Version: 6.38

Sometimes when logging into Squiz Matrix using SSO, users are sent to /azureauth/saml-account-manager/saml2-assertion-consumer-service and they get stuck there.

Steps:

  1. User goes to page that requires authentication
  2. Clicks to login via SSO
  3. User goes through entering username and password in external SSO
  4. They are sent back to website and end up on /azureauth/saml-account-manager/saml2-assertion-consumer-service
  5. User goes back to page that requires authentication
  6. Clicks to login via SSO
  7. They are sent to /azureauth/saml-account-manager without further request for username/password
  8. The code in Logged in kicks in and redirects them their referring page

Is this a configuration issue within squiz matrix? Within the external SSO? What is saml2-assertion-consumer-service even for? I can see it’s configured inside SAML Account Manager but it doesn’t apepar to be doing anything.

How can I make it so users never end up here and are smoothly sent back to where they were when they logged in? If landing on this page is unavoidable for reasons, is there any way to put content on it, so we can explain to the user the next step?

Related: when it DOES work smoothly, it uses the URL set in Return Location. How is it choosing between using Logged In and Return Location to choose which asset to use? How do we get it to use a single asset so we just have one copy of the code?