Heads up, just upgraded a client who uses WatchGuard MFA (via SAML) - 14.1 build 47.46 seems to have a bug affecting the redirection to WatchGuard IDP, but the bug doesn't exist in 14.1 build 43.56.
Other NetScalers for the same client using Entra SAML on 47.46 don't seem to be affected.