The error means you didn't follow the upgrade documentation and changed the IdP's signing key. That strongly implies you didn't upgrade properly from V2, which prevents it from generating a new signing key and leaves the old one in place. It's as simple as that. All of this is covered in the documentation. -- Scott