See that the recipient matches with https://<HIDDEN>/saml/SSO/alias/cloudfoundry-saml-login-dev but I think the Binding does not match (in the code I am not sure what binding is matched to. Is it Method ?) .
It's been a while since I dug into that code, but I think the Recipient should match the URL you're posting the message to, which is: