A signed identity response is valid while one relying party rejects its audience string under different normalization rules during a failover rehearsal

Trust succeeds cryptographically and string semantics still break the session. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.