Tomomi, Could you please paste the relevant part of the log on DEBUG? If no assertion was sent at all, we want to look at the IdP. If an assertion was sent but rejected, we want to look at the SP. Take care, Nate.