Authentik provider doesn't support social login

[jrang188]

Description

The SAML2AWS Authentik provider doesn't seem to support cases where Authentik uses social login instead of the built-in login.

Details:

macOS: Sequoia 15.7.2 (24G325) arm64
authentik: 2026.2.1
saml2aws: 2.36.19

Stack Trace

DEBU[0005] [GET] https://{DOMAIN}/application/saml/{APP_NAME}/sso/binding/init/  provider=authentik
DEBU[0005] [GET] https://{DOMAIN}/if/flow/aws-saml-auth/?next=%2Fapplication%2Fsaml%2F{APP_NAME}%2Fsso%2Fbinding%2Finit%2F  provider=authentik
DEBU[0006] [GET] https://{DOMAIN}/api/v3/flows/executor/aws-saml-auth/?query=next%3D%252Fapplication%252Fsaml%252F{APP_NAME}%252Fsso%252Fbinding%252Finit%252F  provider=authentik
DEBU[0007] [POST]https://{DOMAIN}/api/v3/flows/executor/aws-saml-auth/?query=next%3D%252Fapplication%252Fsaml%252F{APP_NAME}%252Fsso%252Fbinding%252Finit%252F  provider=authentik
Unexpected
github.com/versent/saml2aws/v2/pkg/provider/authentik.(*Client).doPostQuery
        github.com/versent/saml2aws/v2/pkg/provider/authentik/authentik.go:203
github.com/versent/saml2aws/v2/pkg/provider/authentik.(*Client).queryNext
        github.com/versent/saml2aws/v2/pkg/provider/authentik/authentik.go:173
github.com/versent/saml2aws/v2/pkg/provider/authentik.(*Client).processQuery
        github.com/versent/saml2aws/v2/pkg/provider/authentik/authentik.go:117
github.com/versent/saml2aws/v2/pkg/provider/authentik.(*Client).auth
        github.com/versent/saml2aws/v2/pkg/provider/authentik/authentik.go:86
github.com/versent/saml2aws/v2/pkg/provider/authentik.(*Client).auth
        github.com/versent/saml2aws/v2/pkg/provider/authentik/authentik.go:77
github.com/versent/saml2aws/v2/pkg/provider/authentik.(*Client).Authenticate
        github.com/versent/saml2aws/v2/pkg/provider/authentik/authentik.go:51
github.com/versent/saml2aws/v2/cmd/saml2aws/commands.Login
        github.com/versent/saml2aws/v2/cmd/saml2aws/commands/login.go:106
main.main
        github.com/versent/saml2aws/v2/cmd/saml2aws/main.go:199
runtime.main
        runtime/proc.go:285
runtime.goexit
        runtime/asm_arm64.s:1268
error retrieving saml response from idp
github.com/versent/saml2aws/v2/pkg/provider/authentik.(*Client).Authenticate
        github.com/versent/saml2aws/v2/pkg/provider/authentik/authentik.go:53
github.com/versent/saml2aws/v2/cmd/saml2aws/commands.Login
        github.com/versent/saml2aws/v2/cmd/saml2aws/commands/login.go:106
main.main
        github.com/versent/saml2aws/v2/cmd/saml2aws/main.go:199
runtime.main
        runtime/proc.go:285
runtime.goexit
        runtime/asm_arm64.s:1268
Error authenticating to IdP.
github.com/versent/saml2aws/v2/cmd/saml2aws/commands.Login
        github.com/versent/saml2aws/v2/cmd/saml2aws/commands/login.go:108
main.main
        github.com/versent/saml2aws/v2/cmd/saml2aws/main.go:199
runtime.main
        runtime/proc.go:285
runtime.goexit
        runtime/asm_arm64.s:1268