TPA-hinted links with the Learning MFE

[Wasabi (Daniel Herrmann)]

@mrtmm

Interesting, I wonder if there is some differences with SAML vs OAuth2 then. From your examples I see that you are using OAuth while we are using SAML. I get logged in with any of these examples but only land on the dashboard.

That’s certainly possible. We’ve migrated from SAML to OAuth2, but I have not tested this setup before the migration. There are is one setting that we needed to be adjusted (it’s a tutor plugin in our case):

hooks.Filters.ENV_PATCHES.add_item(
    ("lms-env-features", "THIRD_PARTY_AUTH_HINT: \"oa2-keycloak\"")
)

Maybe this configuration is missing for you? In your case obviously saml-xyz

@mrtmm

This is a bit scary in general as well, how long can we count on a workaround that relies on any legacy URLs? I wonder if this still works for you in Redwood; I’ve tested with SAML in Palm and Quince and it’s not working.

Honestly this is what I am scared about as well. We’re running Quince right now, and we’ll need to thoroughly test this in Redwood before updating. This functionality is quite important for us. Still hoping for some feedback on the Github issue you raised.