https://brootware.github.io/posts/troubleshooting-saml-assertion-errors-in-sso-applications/