Running into an issue with our Open ID Connect Authentication Provider. The current way our registration page has been implemented requires a unique identifier to be passed through the state parameter - which if returned when the user is redirected to the redirect uri causes an error:
I've noticed the following:
- Salesforce injects a state parameter in the URL of the auth provider when navigating to it from a communities login page - not sure how this is encoded so can't decode it; tried base64. Not sure what the contents of that state is.
- If the state parameter is blanked; I receive the above error
- If the state parameter is removed all together, it appears to work
From my analysis, it looks like Salesforce has an optional strictly formatted state parameter used on authentication provider login pages.
Again, the problem is that my companies current authentication provider implementation requires the use of the state parameter for registration. When the registration page redirects the user the user if given the error above. My assumption is that error is due to the fact that the state does not meet Salesforce's syntax.
Can anyone provide insight on what that syntax is, if I can add attributes within the state, or how to configure our SF environment to disregard the state when we pass it over?