omni with authentik

[NegativeFeedback]

I am attempting to selfhost omni in the homelab with authentik as the saml provider. by default the saml provider says the acs metadata is missing a root and I solved this but setting a signing certificate and only selecting sign assertions. attempting to follow keycloaks setup. now I get
`

Bad Request

Verification Certificate configured, but request is not signed.

`

any ideas?

[Unix4ever]

Authentik should work, other people were able to set it up.
Maybe this article will be useful https://integrations.goauthentik.io/infrastructure/omni/