I have my client's site setup to work with SAML, and if I start from the IdP (which happens to be Okta, but I'm not sure that matters), I have no problems at all getting into the site (other than what I've mentioned in other places).
However, I cannot get WP to redirect to the IdP when trying to access a secure resource. All I get is an empty login page with a redirect_to query string back to (in this case) wp-admin.
Now, there are two possibly complicating factors in this:
- Everything, including the homepage, is secured. This is a publicly accessible site that is accessible only to employees
- Okta does not provide a URL for its metadata, it provides static markup