Kibana samlAuthError

I’m trying to get saml authentication work in Kibana and figure out the requirements.
What are the requirements on the assertion sent to the acs url? does anyone know this.
It seems the assertions is decoded properly but no error is shown in the logs.
Can I see somewhere why the authentication is failing?