IdP Initiated SSO between Clarizen and IBM CIS

Hi ,

I am trying to set up SSO on the Clarizen TB box . I have followed all rules for IdP initiated SSO but still get "Federated Authentication Failed " message . 

Please note I am getting a successful assertion and I am passing the email value of user as the principalAttribute in the assertion - which is also the user's Clarizen login . 

Where am I going wrong ? I am using IBM Cloud Identity Service as the IdP . 

Ticket raised for this is : 

http://success.clarizen.com/hc/requests/55337

Thanks

PM