To add some details, I get a hit similar to below for the login step..
web_url("app",
"URL=appurl/saml/SSO/alias/wms?SAMLart=AAQAAHE3kUAJcExudbryrN79alnmmAgyQAkr3lXnh0OkuBFenLCYK3pN7pc%3D",
though we pass a credential at the log in step, its not recorded. I assume its converted to the SAMLart for authentication. how can I handle this?