Edit. I figured out that I had to remove the BEGIN CERTIFICATE portion from the X509 cert when entering it on the zammad UI.
I’m now able to perform a saml sign in but it’s returning a “422: The change you wanted was rejected.” error.
Message from saml: invalid_ticket