I configured this some time ago following that video and the documentation in Central.
From what I remember from then was getting the claims right was challenging for me because I changed some names like app to my own name, but you need to take it literally. Also I mixed up some _underscores, and it needs to all exactly match. This is what I return in my setup:
Aruba Support should be able to assist you with this as well, as they can better look up what the message means or may be able to do deeper analysis.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC.
------------------------------