3557506 - Error: 'Response doesn't have any valid assertion which would pass subject validation' when enabling SAML in SAP Analytics Cloud (SAC)

Error occurs when enabling SAML in SAC: 'Response doesn't have any valid assertion which would pass subject validation'

SAP ANALYTICS CLOUD 2024.15.13

Enable SAML SSO in SAC according to https://help.sap.com/docs/SAP_ANALYTICS_CLOUD/00f68c2e08b941f081002fd3691d86a7/3651184dad944aa2b361ad029a7a8cae.html

After step 13, notice error: 'Response doesn't have any valid assertion which would pass subject validation'

Signing certificate that's returned in the SAML response does not match the certificate in the IDP metadata which causes discrepancy.

Provide an updated IDP metadata whose signing certificate matches that sent from IDP in the SAML response during SAML verification OR update the certificate on IDP to match the one that is currently being provided in the IDP metadata. 

• 2569847 - Where can you find SAC user assistance (help) to use, configure, and operate it more effectively?
• Have a question? Ask it here and let our amazing SAP community help! Or reply and share your knowledge!
• 2487011 - What information do I need to provide when opening an case for SAP Analytics Cloud?
• 2511489 - Troubleshooting performance issues in SAP Analytics Cloud
• Search for SAP Analytics Cloud content using Google or Bing:
• • https://www.google.com/search?q=site%3Ahttps%3A%2F%2Fuserapps.support.sap.com+SAP+Analytics+Cloud
  • https://www.bing.com/search?q=site%3Ahttps%3A%2F%2Fuserapps.support.sap.com+SAP+Analytics+Cloud
  • Note: Add relevant text or warning/error messages to the text search field to filter results.
• SAP Analytics Cloud Connection Guide
• Getting Started with SAP Analytics Cloud Expert Community page
• SAP Analytics Cloud Get More Help and SAP Support
• Need More Help? Contact Support or visit the solution finder today!

SAML, SSO, SAC, response, IDP, certificate, signing certificate , KBA , LOD-ANA-ADM , SAC Administration , Problem