KB439641: "SAML message intended destination endpoint « httpS…. » did not match the recipient endpoint « http://... »" when connecting to Microstrategy JSP Web in SSL using a SAML authentication

SYMPTOM:
After enabling SAML authentication for Strategy Web as per (https://www2.microstrategy.com/producthelp/10.9/SystemAdmin/WebHelp/Lang_1033/Content/Admin/enabling_single_sign_on_with_saml_authentication_jsp.htm ), the end user might encounter the following error

"SAML message intended destination endpoint 'https://{url_of_the_SAML_portal}' did not match the recipient endpoint 'http{url_of_the_SAML_portal}'"

 
CAUSE:

The SAML message is displayed to the end user when proxy load balancing is enabled. The destination of the SAML message is specified in the SAML response. In this scenario, the domain and port of the webserver machine receiving the SAML message does not correspond the domain and port number of the proxy machine, which is the destination in the SAML message. Due to this mismatch, the SAML response cannot be validated and the authentication fails.
ACTION :
Apply this steps outlined under https://www2.microstrategy.com/producthelp/10.10/SystemAdmin/WebHelp/Lang_1033/Content/saml_for_proxy_load_balancer.htm
Third Party Software Installation Warning:

The third-party product(s) discussed in this technical note are manufactured by vendors independent of Strategy. Strategy makes no warranty, express, implied or otherwise, regarding these products, including their performance or reliability.
KB439641