The Back Office is now configured to use the Identity Provider. But to get the SAML authentication to work, the Back Office has to be declared to the Identity Provider as a Service Provider.
Upload the metadata file generated at the previous step to the Identity Provider.