3569185 - Signature not valid when Issuer Name is configured for communication with Microsoft Entra ID

• IAS tenant acts as a proxy to a Corporate Identity Provider (Microsoft Entra ID).
• Issuer Name is configured according to Configure Different Trust Configurations for the Same Identity Authentication.
• User Authentication fails. In the Troubleshooting log, the following error is displayed:  
• 
   "Service Provider has received SAML2Assertion from Identity Provider [https://sts.windows.net/<Entity ID>/] that has invalid signature. " 

Identity Authentication Service

invalid signature, Issuer Name, Authentication Error, SAML2Assertion, Identity Provider, IAS, Microsoft Entra ID, Corporate Identity Provider, Signature not valid. , KBA , BC-IAM-IDS , Identity Authentication Service , Problem