The Decode Json Web Token assertion seems to not be decoding it correctly, and not able to determine why. Logs associated are below:
...
com.l7tech.external.assertions.jwt.server.ServerDecodeJsonWebTokenAssertion: ssguid="0000019bc752fabe-15bc8": 10802: Could not find the specified private key.
...
ssg 11.1
Configuration problem
Added the ${<youSigningCertificate.mainpart} in the Decode Web Json assertion configuration field: Recipient Key Context Variable