The way I understood simplesamlphp_auth work is that once the user clicked the link /saml_login/ it will redirect the user to the IdP (in my case on-prem) authentication via shibboleth and once it's authenticated, it redirects the user back to the page he came from. Is this a correct assessement?