Keycloak SAML Failing

I am getting the following error when I setup keycloak as a SAML provider for rancher authentication.

ERROR: cannot validate signature on Response: cannot find any signing certificate in the IDP SSO descriptor