If you face “We can’t log you in. Check for an invalid assertion in the SAML Assertion Validator (available in Single Sign-On Settings) or check the login history for failed logins.” issue, make sure in the Identity Provider Organization, the user has access to the Connected App.
Hi, where this permission? Could you please provide the navigation? Thank you!
Check the Assigned Connected Apps in the profile.
I have the same problem, where is?? is it in internet settings?
This is available in the Profile if you are using Connected Apps for SSO.
Check step 11 in this – http://www.infallibletechie.com/2016/07/how-to-enable-sso-saml-using-salesforce.html