3117932 - Configuring Different Trust Configurations for the Same IAS Tenant the authentication fails

• After configuring the SAP Identity Authentication (IAS) and Azure by following the section (Optional) Configure Different Trust Configurations for the Same Identity Authentication Tenant (Azure AD Apps) the authentication fails
• The Reply URL configured in the Azure is correctly matching the Assertion Consumer Service (ACS) URL (typically https://<tenant ID>.accounts.ondemand.com/saml2/idp/acs/<tenant ID>.accounts.ondemand.com )
• In the Troubleshooting Logs the error is present similar to below:
  
  

<date and time>  timestamp=<date and time> , ipAddress=<IP address> , severity=ERROR, location=com.sap.security.saml2.sp.sso.AssertionValidationService,

crtAccount=<tenant ID>, authenticatedSubject="anonymous", correlationID <correlation ID>, message=

Signature validation of SAML2Assertion failed.com.sap.security.saml2.lib.common.SAML2Exception: Signature not valid!

SAP Identity Authentication

Azure Corporate IDP

KBA , BC-IAM-IDS , Identity Authentication Service , Problem