Allow redirection after SSO login about pressbooks-saml-sso HOT 4 CLOSED

It appears that there's a SAML parameter called RelayState (see https://stackoverflow.com/questions/34350160/what-is-exactly-relaystate-parameter-used-in-sso-ex-saml or http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0-cd-02.html#5.1.2.SP-Initiated%20SSO:%20%20Redirect/POST%20Bindings|outline) that we may be able to use to redirect users upon login to desired pages.

from pressbooks-saml-sso.

@connerbw The client who requested this is willing/able to create temporary accounts on their IdP for us to use in testing whenever that would be helpful.

from pressbooks-saml-sso.

Will work:

• https://integrations.pressbooks.network/portuguese/chapter/dialogo-1/
• https://integrations.pressbooks.network/portuguese/wp-admin/tools.php?page=pb_import

Will not work (will fallback to home url, like it did before)

• https://google.com/

Rules for redirect_to=URL come from:
https://developer.wordpress.org/reference/functions/wp_validate_redirect/

from pressbooks-saml-sso.

Worked as intended. New users were able to redirect to signup.php page and received expected privileges error when attempting to redirect to wp-admin page they don't have access to.

from pressbooks-saml-sso.