Messages such as Error extracting certificates from X509Data or Unable to decode X.509 certificates can also appear in the log file. It means that the SAML response could not be authenticated by the Service Provider. Ensure that the public Identity Provider certificate is right in the Identity Provider metadata file.