I am attempting to use SAML IDP-Initiated login (from Authentik User Interface page to Service Provider) to log into an application that requires a Relay State be set as a query param on the login.

The software that I am trying to authenticate using SAML is called Shellngn https://www.shellngn.com/ . Their support indicated that we'll need to set a default relay_state to be sent along with the POST request that is sent to the ACS url of Shellngn. The default value that is required is {"organizationId":1} . They provided a screenshot of where this configuration exists in Okta.

Currently when getting to the POST step in the authentication process we are getting a 500 error in response from Shellngn and we believe the absence of this relay_state to be the cause of this error. Is there any way to set this in authentik for IDP-initiated logins?

• authentik version: 2023.6.1
• Deployment: Docker Compose