LG-8762: add cancel link to completion screen, redirect to SP without consent happening if you don't agree.

[mdiarra3]

No description provided.

[mdiarra3]

Going to look into adding tests, but wondering if randomly taking them back to the SP initial URL might cause confusion for users?

[aduth]

Going to look into adding tests, but wondering if randomly taking them back to the SP initial URL might cause confusion for users?

At least in the case of OIDC, we're including an "access denied" reason as a parameter in the redirect, with the expectation that a partner would detect this to tailor messaging around not completing the sign up process, so ideally it would not be as confusing for the user vs. if we were to take them back to the partner's homepage. I think the SAML "return to SP" URL is meant to work the same, though not 100% certain. In any case, we should be generally comfortable that our implementation of return_to_sp_url would be where we expect the user to go after choosing not to complete the process.

[aduth]

LGTM 👍