Our company is attempting to set up SSO and we've had our consultant help us. However, after setting things up on NS and Azure we get an error message every time we test the user on the Azure side. It succesfully issues a token (SAML response) and then a new tab opens and we have an error message in NetSuite that says "Exception while processing SAML response: This service provider is not the intended audience"

Any help would be appreciated, we've followed the SAML set up steps in Suite Answers and have talked with our consultant for both Azure and NetSuite but no one seems to know why this isn't working.