SAML SSO redirect is removing URL content after the first # (hash) affecting catalog links if the user is not already logged in - Known Error

SAML SSO redirect is removing URL content after the first # (hash) affecting catalog links if the user is not already logged in Description When using SSO, users are redirected several times when login in.

This process does not consider/process the hash (#) as part in the URL.

Please note many CMS sites use references using #.

e.g. Calling /ess/content.do?p=165#step-1 it will redirect to /ess/content.do?p=165

missing the information after the hash (#)

Steps to Reproduce

Pre-requisites: You need to have Multi Provider SSO plugin installed and setup.

1. Chose an existing KB article or create new. 2. Add some content on the KB article and also add some local references using "#" at the top so that when you click on that link, it redirect you to that specific section of the page. e.g. Create article KB0000011 and modified it as shown below:

OLD HTML: Be proactive

Be proactive

NEW HTM: Be proactive

Be proactive

2.1. Now, when you view this KB article, "Be proactive" appear as a local hyperlink and redirect you locally on the page. 2.2 Right click on "Be proactive" and select "Copy Link Address" and it gives you below URL which includes a hash (#) /ess/kb_view.do?sysparm_article=KB0000011#be_proactive

3. Now open an incognito browser window and access this URL via SSO. 4. Check the SAML logs even before you enter IdP login credentials and look for Relay State value:

The result is that the generate Relay State is: /navpage.do (missing the final URL)

We were expecting a Relay State of: /ess/kb_view.do?sysparm_article=KB0000011#be_proactive

Workaround The workaround is to ask the users to click on the link once again after they logged into the system