Correct.  The delay is to give the user time to read the password warning message.  The auto-submit is to make sure that the SAML response gets back to the service without requiring user interaction. 10 seconds is the default from the existing LPPE code.