The following HTTP 400 error shows when logging into Mirror Gateway
This can be caused by the request having an incorrect certificate
Contact Symantec support and provide the following information
The certificate used in the request shown in the SAML trace should match the certificate in the metadata.xml file. And the cert needs to be current.
If the cert in the metadata.xml file is different than the cert in the request, Symantec Support can upload the new metadata.xml file to the backend.