To aid debugging, we can extend our current WARN log messages for the SAML realm to include the issuer (if available). This will make it easier to diagnose false positive log messages (e.g., around signature validation failure) for deployments that have multiple SAML realms configured.
We should also improve our SAML common issues docs to mention that the WARN log can be benign in multi-realm setups.
Description
To aid debugging, we can extend our current WARN log messages for the SAML realm to include the issuer (if available). This will make it easier to diagnose false positive log messages (e.g., around signature validation failure) for deployments that have multiple SAML realms configured.
We should also improve our SAML common issues docs to mention that the WARN log can be benign in multi-realm setups.