Validation of protocol message signature failed

Hello,

I'm attempting to set up the new edge ui after upgrading from 4.18.05 to 4.19.06. Except for the new edge ui, all components, including sso, are installed in server1 as an all in one install. I installed the new edge in a separate server, server2, as the install instructions suggested.

My SAML IDP is keycloak. The client was configured in keycloak by importing the xml file found at http://server1:9099/saml/metadata. When I log on to http://server2:3001, I'm redirected to http://server1:9099/login. I can click on the log on to idp from there and I'm sent to my keycloak SAML IDP. After I enter credentials, I'm redirected to http://server1:9099/saml_error with the message "Validation of protocol message signature failed". I've search the apigee logs for that phrase but there are no hits.

Any help in identifying and resolving the issue would be greatly appreciated. Thank you.