SAML Integration Issue – Not Redirecting to IdP After EDS (Discovery Service) Selection

[wakhan]

Hi everyone,

We’re in the process of integrating Morpheus with our federated identity infrastructure using SAML 2.0. As part of this, we're using an external Discovery Service (EDS), also known as a WAYF (Where Are You From) service, hosted at https://eds.xxxx.xx. This service allows users to select their identity provider (IdP) before authentication.

Here’s the expected flow:

1. A user tries to access a protected Morpheus resource.

2. Morpheus redirects them to the Discovery Service (https://eds.xxxx.xx) with the appropriate entityID and return URL.

3. The user selects their home institution (IdP) from the list.

4. The Discovery Service redirects the user back to Morpheus using a URL like:

https://morpheus.xxxx.xx/externalLogin/callback/xxxxxx

5. At this point, Morpheus should initiate a SAML AuthnRequest and redirect the user to the selected IdP’s login page.

6. After successful login at the IdP, the SAML assertion should be sent back to Morpheus to complete authentication.

The issue we’re facing is at step 5 — after the user selects an IdP and is redirected back to Morpheus, there is no further redirection to the IdP login page. It seems Morpheus is not initiating the SAML AuthnRequest based on the selected IdP from the Discovery Service.

Has anyone successfully integrated a Discovery Service or WAYF component with Morpheus before? If so, how did you handle the callback and ensure Morpheus initiated the SAML request to the IdP?

Any insights or advice would be greatly appreciated.