Troubleshooting
The application cannot create its session after the response (blocked cookie, Secure flag over internal http, or an ACS that itself redirects to the sign-in).
Probable cause. The application cannot create its session after the response (blocked cookie, Secure on internal http, or an ACS that itself redirects to the login).
Secure, SameSite) and that the ACS is not protected by the very login it is meant to complete.To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.
All SAML and OpenID Connect errors
Want to see it for real? ID-Kit plays the role you are missing and shows you each step.