, I would check two things in this case.

1. The federation id of the logging in user should be mapped to a user record. Generally this would give you a message like "Unable to map the subject to a

user" after the result for the 14th assertion (14. Checking if session security level is valid, if provided).

2. We have faced similar error for few users when they use a bookmarked link to the dynamic temporary URL. Please ensure that all the users use the SSO URL which may be of the form

Hope that helps.