providers/saml: force user to select authz flow for import

authentik/providers/saml/forms.py

@@ -94,6 +94,9 @@ class SAMLProviderImportForm(forms.Form):
     """Create a SAML Provider from SP Metadata."""
 
     provider_name = forms.CharField()
+    authorization_flow = forms.ModelChoiceField(
+        queryset=Flow.objects.filter(designation=FlowDesignation.AUTHORIZATION)
+    )
     metadata = forms.FileField(
         validators=[FileExtensionValidator(allowed_extensions=["xml"])]
     )

authentik/providers/saml/views.py

@@ -270,6 +270,7 @@ class MetadataImportView(LoginRequiredMixin, FormView):
                 form.cleaned_data["metadata"].read().decode()
             )
             provider = metadata.to_provider(form.cleaned_data["provider_name"])
+            provider.authorization_flow = form.cleaned_data["authorization_flow"]
             provider.save()
             messages.success(self.request, _("Successfully created Provider"))
         except ValueError as exc: