Wrong key (store) was used for signing SAML tokens.
Improved building process.
Now the RP service works with WS-Federation!