From 5c07d66774971927589542b2abea7c483e20a5b5 Mon Sep 17 00:00:00 2001
From: Jacob Fink <jfink@bitwarden.com>
Date: Fri, 18 Aug 2023 17:02:10 -0400
Subject: [PATCH] return early if scheme doesn't match

---
 bitwarden_license/src/Sso/Utilities/Saml2OptionsExtensions.cs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bitwarden_license/src/Sso/Utilities/Saml2OptionsExtensions.cs b/bitwarden_license/src/Sso/Utilities/Saml2OptionsExtensions.cs
index 46a75ca5c2..6b995ab7f7 100644
--- a/bitwarden_license/src/Sso/Utilities/Saml2OptionsExtensions.cs
+++ b/bitwarden_license/src/Sso/Utilities/Saml2OptionsExtensions.cs
@@ -22,9 +22,9 @@ public static class Saml2OptionsExtensions
             return false;
         }
 
-        if (context.Request.Query["scheme"].FirstOrDefault() == scheme)
+        if (context.Request.Query["scheme"].FirstOrDefault() != scheme)
         {
-            return true;
+            return false;
         }
 
         // We need to pull out and parse the response or request SAML envelope