The URI um/login?um_no_redirect=true is only for testing and since you go a message that client successfully authenticated, the test has passed. Also, if you are logged in via sso using /lc/ws, the sso is working fine. I think your system is setup fine for sso.