SAML SSO: Checking 'Remember me' breaks Okta login
We are trying to set up GitLab Geo with the SAML(Okta) authentication for the secondary server and experienced the following oddity:
While a plain click to the SAML login button works perfectly fine, enabling the Remember me checkbox before clicking the button leads to the following error after successful authentication:
Could not authenticate you from SAML because "The response was received at htts://gitlab-2.example.net/users/auth/saml/callback instead of https://gitlab-2.example.net/users/auth/saml/callback?remember me=1".
I'm not sure if this is the problem in the code or if we missed something in the SAML configuration setup, but it looks like that optional parameter shouldn't be considered while evaluating the login validity.
The secondary GitLab instance was configured according to the documentation, where htts://gitlab-2.example.net/users/auth/saml/callback was added to Okta as Other Requestable SSO URLs with the index 1 and assertion_consumer_service_url being removed from the initial config.