Cause for Error: This happens when you have configured wrong Audience URL in your Identity Provider.
Solution: To fix this, navigate to Service Provider Metadata tab and copy the Audience URL from metadata table and paste it in the Audience URL field in your IDP
Feel free to reach out to us at samlsupport@xecurify.com.