3026204 - Identity Authentication - "SAML2Assertion from Identity Provider [http://XXX] that has invalid signature"

Identity Authentication is acting as a proxy, the authentication happens through a corporate identity provider. When logging in, users are redirected back to the login page.

In the Troubleshooting log, the following error is displayed:

Service Provider has received SAML2Assertion from Identity Provider [http://XXX] that has invalid signature. 

Signature validation of SAML2Assertion failed. com.sap.security.saml2.lib.common.SAML2Exception: Signature not valid!

SAP Cloud Identity Services – Identity Authentication

Signature, loop, SSO fails, signature not valid, invalid signature, SAML2Assertion failed, IAS, login, corporate idp, single sign on not working , KBA , BC-IAM-IDS , Identity Authentication Service , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , Problem