in case of expired assertion, automatically open sso login