aniru2dh

@aniru2dh
when you are trying to give login url make sure you are pointing to right realm location.
for example: if I have my agent configured in /test then I would be given my realm login url like below
https://localhost.openam.com:8443/sso/UI/Login?realm=/test

@aniru2dh
1. Yes, you can use same OpenAM instance as Hosted IDP and Hosted SP.
https://backstage.forgerock.com/docs/am/5.5/saml2-guide/#saml2-providers-and-cots

2. IDP/SP name can be any string. It is not necessary to have in URL format. You can change it while creating IDP/SP

Thanks,

@aniru2dh, Check if signing cert public key was imported into SP system OR public key is matching or not.

Here is Service Now SAML setup doc.
https://docs.servicenow.com/bundle/geneva-servicenow-platform/page/integrate/saml/task/t_InstallTheIdentityProviderCert.html

Thanks,

@aniru2dh are you using centralized or local configuration? If you are using local configuration, you need to update agent.conf stored on web server under agent installation dir. Otherwiese, switch to “centralized”.

Thanks,