Hey Andy,
Good morning!
It's been a while since I did this but what I do remember is that this issue is most likely at the SAML Signing Certificate in line with the below:

Configure Azure AD Authentication - OutSystems
How to configure OutSystems to use identity providers using SAML - OutSystems
Hope this helps and please send my regards to the team.
Thank you and kind regards,
Chris