SAML ACS URL does not support dynamic query params

[MDXDave]

Describe the bug
I have been using Authentik with Weblate for several years.
Recently the login behavior was changed.
The ACS URL is extended by an authid, which leads to an error in Authentik:

ACS URL of https://weblate.company/accounts/complete/saml/?authid=WyJuam... doesn't match provider ACS URL of https://weblate.company/accounts/complete/saml/.

Unfortunately it is currently not possible to set an regex as the ACS url (like the OAuth2/OpenID provider).

It seems they introduced the query param on 1st of april: WeblateOrg/weblate@1a1e3c8#diff-ab61877cda054d398281dba30e248bfde11f66869b7b356ef05e25cc51127003

To Reproduce
Steps to reproduce the behavior:

1. Configure Authentik with Weblate 5.10.4.0.
2. Login via SAML
3. Upgrade Weblate to 5.11.4.0
4. See error

Expected behavior
The login should work without any issue.

Screenshots

Logs

Context
{
    "message": "ACS URL of https://weblate.XXXX/accounts/complete/saml/?authid=WyJuamRteXJXXXXXXXXXDjubEioZzE doesn't match Provider ACS URL of https://weblate.XXXXX/accounts/complete/saml/.",
    "provider": {
        "pk": 7,
        "app": "authentik_providers_saml",
        "name": "Weblate SAML",
        "model_name": "samlprovider"
    }
}
User
{}

Version and Deployment (please complete the following information):

• authentik version: 2025.4.0
• Deployment: docker-compose