I've installed a CA (not self-signed) cert on ASA running 9.9(2) using SAML for authentication.  The negotiation between the Anyconnect client (PC and Mac) work ok till the point where there's an Anyconnect error "Failed to generate SAML AuthnRequest...