At most two saves can be attempted on this specific attack
Sanctuary says (emphasis mine):
Until the spell ends, any creature who targets the warded creature with an attack or a harmful spell must first make a Wisdom saving throw. On a failed save, the creature must choose a new target or lose the attack or spell.
The consequence that a failed save against sanctuary requires the selection of a new target for the attack means that the saving throw can be attempted at most twice (in this case, of two creatures in reach of the attack). Regardless of who is attacked in what order, at the point in time when the attack has already targeted both the monk and his mount, there are no new targets available and the attack is automatically lost. Cf. If 2 creatures in range have the Sanctuary spell cast on them, can you repeatedly switch targets between them until you succeed on the save?
If the monk is attacked first, and the save is failed, the spell forces the attacker to either select a new target (the mount) or lose their attack. Targeting the mount will trigger the Mounted Combatant Feat, permitting the monk to force the attack on the mount to target1 them instead. When the monk is again targeted, a second failed save means the attacker must either choose a new target or lose the attack, but now there are no targets that have not already been subjected to the attack, so the attack must be lost.
If the mount is attacked first, the attack triggers the Mounted Combatant Feat, permitting the monk to force the attack on the mount to target1 themselves instead. When the monk becomes the target, a failed save means the attacker must either choose a new target or lose the attack, but now there are no targets that have not already been subjected to the attack, so the attack must be lost.
1 Trolleitor asks whether the monk must save against the sanctuary spell in order to use the Mounted Combatant feat. Sanctuary says "any creature who targets the warded creature with an attack or a harmful spell must first make a Wisdom saving throw". It is not clear whether this means [any creature who choses the warded creature as the target of their own attack] or [any creature who selects the warded creature as the target of any attack (including the attack of another creature)], and this is perhaps worth its own question. However, consider the consequence of a failed save; the creature attempting to target the warded creature must select a new target or "lose the attack or spell". It is not clear to me how I can "lose" an attack I am not myself making, even if I am permitted to select its target. Thus, personally, I would go with the first interpretation and not require the monk to save against sanctuary. If the DM favors the second interpretation, however, then the sanctuary spell could indeed force a third save, with the maximum then being two from the attacker and one from the monk.