fix(xo-server-auth-saml): AssertionConsumerServiceURL matches callback URL

Fixes xoa-support#1235

CHANGELOG.unreleased.md

@@ -5,8 +5,10 @@
 ### Bug fixes
 
 - [Host] Show the host's memory usage instead of the sum of the VMs' memory usage (PR [#3924](https://github.com/vatesfr/xen-orchestra/pull/3924))
+- [SAML] Make `AssertionConsumerServiceURL` matches the callback URL
 
 ### Released packages
 
+- xo-server-auth-saml v0.5.3
 - xo-server v5.35.0
 - xo-web v5.35.0

packages/xo-server-auth-saml/src/index.js

@@ -42,7 +42,12 @@ class AuthSamlXoPlugin {
 
   configure({ usernameField, ...conf }) {
     this._usernameField = usernameField
-    this._conf = conf
+    this._conf = {
+      ...conf,
+
+      // must match the callback URL
+      path: '/signin/saml/callback',
+    }
   }
 
   load() {