Dashboard module should respect destination parameter to support SSO redirection (e.g., with Samlauth)

Created on 17 June 2025, 4 months ago

Problem/Motivation

When using the Dashboard module in combination with SSO login systems such as Samlauth, the module unconditionally redirects users to their first accessible dashboard after login, even if a destination parameter was provided in the original URL.

This causes a poor user experience when:

  • A user tries to access a specific page (e.g., /node/123/edit) while logged out
  • The destination is passed correctly to the SSO flow
  • Upon successful login, the Dashboard module overrides the destination and redirects to a dashboard instead

Steps to reproduce

  1. Install and configure Samlauth with an SSO Identity Provider
  2. Set a page that requires login, e.g. /node/123/edit
  3. As an anonymous user, visit /node/123/edit
  4. You are redirected through the SSO login flow
  5. After login, instead of being redirected to /node/123/edit, you land on a dashboard page

Proposed resolution

Update the Dashboard module to first check if a destination parameter exists in the request. If it does, skip the dashboard redirection and allow the existing redirect (from SSO or core login flow) to proceed.

Alternatively, make this redirect behavior configurable (e.g., dashboard_redirect_enabled: true|false), so site owners can delegate post-login redirect behavior to other modules if needed.

πŸ› Bug report
Status

Active

Version

2.0

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States ahughes3

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024