CKAN shows native login link instead of saml login link

[FuhuXia]

When logged-out user tries to access an internal page, CKAN gives a login link that leads to native CKAN login and generates an error when user clicks it.

Error:

This resource is forbidden by the system administrator.
Only SSO through SAML2 authorization is available at this moment.

How to reproduce

https://inventory.data.gov/organization/new
https://catalog.data.gov/organization/new

Expected behavior

Link to saml login page.

Actual behavior

Link to native CKAN page then error.

Sketch

1. change upstream saml2auth, or
2. add config nginx to redirect /user/login to /user/saml2login, or
3. do not show the link.

Related to #2702 and keitaroinc/ckanext-saml2auth#33

[nickumia-reisys]

Do you think this line is effecting it (as per the discussion in the linked ticket in the issue)?

• https://github.com/GSA/catalog.data.gov/blob/4dcac20de7674f929eee5d9b63d11c2b84b9850c/ckan/setup/who.ini#L8