Unable to login using SAML (CSRF state value is invalid)

Hey there.

Sometimes the “true” error lies right before CSRF state value is invalid, and can be found in the logs (specifically web.log).

That happened in this thread (the real issues was idp_cert_or_fingerprint_not_found_and_required)

Do you see anything else int he logs?