Just a heads up for anyone else running into this issue. In Okta, the
above solution wasn't working for us as it required a forward slash
prefix. Once we changed the default relay state to "/samlsuccess.jsp" we
were able to once more authenticate as ...