diff --git a/src/routes/authentication.js b/src/routes/authentication.js index ca7b98d870..cbc3841872 100644 --- a/src/routes/authentication.js +++ b/src/routes/authentication.js @@ -104,7 +104,7 @@ Auth.reloadRoutes = async function (params) { prompt: strategy.prompt || undefined, }; - if (strategy.checkState) { + if (strategy.checkState !== false) { req.session.ssoState = req.csrfToken && req.csrfToken(); opts.state = req.session.ssoState; }