Tie the SSO service to the SSO URL

saml/saml.go

@@ -236,7 +236,7 @@ func NewSAMLIDP(config *Config) (http.Handler, error) {
 	ssoURL.Path += "/login/"
 	metadataURL := *baseURL
 	metadataURL.Path += "/metadata"
-	svc := fmt.Sprintf("%s%s", baseURL.Host, baseURL.Path)
+	svc := fmt.Sprintf("%s%s", ssoURL.Host, ssoURL.Path)
 	if !strings.HasSuffix(svc, "/") {
 		svc += "/"
 	}