If you face “We can’t log you in. Check for an invalid assertion in the SAML Assertion Validator (available in Single Sign-On Settings) or check the login history for failed logins.” issue, make sure in the Identity Provider Organization, the user has access to the Connected App.