Skip the lockbox prompt and automatically redirect to Client when the user is already logged in

At this time the default behavior of Lock in the hosted login page is indeed to still present the end-user with that option screen; I’ve seen discussions about not having that step and proceed to automatically provide a response without end-user interaction, but at this time I don’t have any definitive information available in terms of how/when that would be a possibility.

As you mentioned, if the client application makes the connection explicit then the screen is bypassed and if the client application specifies prompt=none then the experience would be similar. Although with prompt=none you’re guaranteed that the request will not block if end-user interaction is required so you could perform such request behind the scenes and automatically treat the user as logged in if the response is successful.