Messages such asError extracting certificates from X509Data orUnable to decode X.509 certificates can also appear in the log file. It means that the SAML response could not be authenticated by the Service Provider. Ensure that the public Identity Provider certificate is right in the Identity Provider metadata file.