I managed to duplicate your issue myself. I found a configuration format that immediately turns IDP redirection: /apps/saml/config/com.adobe.granite.auth.saml.SamlAuthenticationHandler-mysaml.config Keep in mind, that after you deploy a package, you need to logout from AEM