mirror of
https://github.com/better-auth/better-auth.git
synced 2026-10-19 11:24:57 -05:00
Remove callbackUrl from SAMLConfig; ACS URL is always derived from baseURL + providerId. Remove /sso/saml2/callback/:providerId endpoint; merge GET handler into /sso/saml2/sp/acs/:providerId. Fix SLO SessionIndex comparison (object vs string). Default audience validation to the SP entity ID. Use createSP/createIdP in signInSSO (eliminates last inline construction site). Remove dead fields (decryptionPvk, additionalParams) and duplicate AuthnRequestRecord.