We have installed Gluu from linux package repo on a GCP VM running Ubuntu 20.04 and we have it running under https://gluu.cwdev.io. Now we can start to configure, it turns out to be a bit more tough. Our first goal is to perform a SAML login on a Chromebook using GLUU as 3rd party. It looks like we need to configure in GLUU multiple things at multiple places that are not clear to us. Trying out the SAML flow so far, navigating to [e], we are redirected to our own GLUU instance with a SAML message from Google. But we see a 400.  We were able to find this request in the access log at this location /var/log/apache2/other_vhosts_access.log.1 gluu.cwdev.io:443 217.100.52.178 - - [14/Jun/2022:13:13:11 +0000] "GET /idp/profile/SAML2/Redirect/SSO?SAMLRequest=jZJLT8MwEIT/SuR7kzgpIbWaVhGoUqWCEK8DF2ScbbHkR/BuSvvvSUt5CgGST94Zzexnj6cba6I1BNTeVYzHKYvAKd9ot6rYzfVsULLpZIzSmqwVdUeP7hKeOkCKeqND8TqpWBec8BI1CictoCAlruqzhcjiVLTBk1fesKhGhEB91Il32FkIVxDWWsHN5aJij0QtiiSRSvnOEcYr71cGYuVtsosJbT/CaWh1U6W5c0XIHnKLz5vCs2jmg4J9v4otpUFg0fy0YveKyzIfFUM%2BTJejHFSzzMqjcvSQ5bJIS970MryQiHoNH0bEDuYOSTqqWJZm2SAtBnx4zXOxOzzOj4s7Ft2%2BYeuXZAdIYm8On%2Bn8Dke%2BIdnvYCX9Lt/d6Gaw3EsFONK0ZZN/oLNAspEkf%2BQ3Tj6Xf3/v8z5sfnrhjVbbqDbGP58EkNSTotDB34V5zL8XtlKbumkCILJkcsj9%2BrMmLw%3D%3D&RelayState=a.AM3QAYazG7Q5M2XRP01xFXNDUEVezl2mgTyLoW8vavNt06am_fnuVHhmCjrPzblq HTTP/1.1" 400 5834 "https://accounts.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.61 Safari/537.36" Can we find the 'real' error? We couldn't find any meaningfull under /opt/gluu/jetty/identity/logs/oxtrust.log. Additionally: Even if it works, for production we would need a SAML certificate between GLUU and Google per school. Is this supported in GLUU?