Authentication process can not continue if local authentication fails in SAML2 authentication

[tsujiguchitky]

Description

The SAML2 authentication module has a mechanism to internally call the authentication chain in order to map IdP users to SP users. This authentication chain is called linking authentication chain or local authentication.

However, if authentication fails in this authentication chain, even if the login button is pressed, it will not respond.

Steps to reproduce

1. Configure OpenAM as a SAML SP. At that time, disable auto federation to use local authentication.
2. Change the URL of Assertion Consumer Service (Consumer-> AuthConsumer).
3. Exchange SAML metadata with IdP
4. Configure the SAML2 authentication module. At that time, Linking Authentication Chain is set to ldapService.
5. Try SAML2 authentication and authenticate on IdP.
6. When the data store authentication is displayed, try to log in by entering an incorrect ID and password.
7. Attempt to continue login after an authentication error is displayed

Expected Results

The authentication failure screen is displayed, and the authentication can be continued by pressing the link.

Actual Results

The error message is displayed and then the login screen stops responding.

The error message:

Failed local authentication.  Please try again.