Usning states in universal login

Hi , I m using Universal login for my SPA application, if the user hits on a protected page, i want him/her to login first and then direct the user to the protected page,for this the documentation explains to make use of “state” . But to use state i need to store the state information in localstorage/sessionstorage to prevent CSRF attack. But for universal login page the domain is different from my application’s domain, so if i store the information in my application, once the user is directed to universal login page and comes back to callback url this information(the state information) in localstorage is no longer available. is there any other way to direct the user to the protected page after login?