3117932 - Configuring Different Trust Configurations for the Same IAS tenant the authentication fails

• After configuring the SAP Identity Authentication (IAS) and Azure by following the section (Optional) Configure Different Trust Configurations for the Same Identity Authentication Tenant (Azure AD Apps) the authentication fails
• The Reply URL configured in the Azure is correctly matching the Assertion Consumer Service (ACS) URL (typically https://<tenant ID>.accounts.ondemand.com/saml2/idp/acs/<tenant ID>.accounts.ondemand.com )
• In the Troubleshooting Logs the error is present similar to below:
  
  

Signature validation of SAML2Assertion failed.com.sap.security.saml2.lib.common.SAML2Exception: Signature not valid!

• Identity Authentication
• Azure Corporate IdP

KBA , BC-IAM-IDS , Identity Authentication Service , Problem