Know that there's a few posts on here with much head scratching, but in this case I feel pretty close.
Scenario is setting up SAML login via OneLogin. After much messing about with certificates and config files, I'm at this point and can't work out the way forward. I feel the issue is down to attributes being passed from OneLogin to the qvsaml module, but can't get past it.
I am also struggeling with this solution (using KeyCloak instead of OneLogin).
Maybe you ran in the same issue...?
WebTicket-Generation is not working, because the GetWebTicket.aspx is not accessable after enabling "Forms" Authentication for the whole/QvAjaxZfc IIS application - which is the needed setting to get SAML working.
Error is visible in windows event log - reproducable in PostMan, but also when the QlikView.aspx is doing the request after successful SAML Responde decoding.