I think this covers the redirection to signon (without it, there would be no form to fill in...).  It's not currently covering the redirection back from signon to the client app though.