Custom Signing Cert on Enterprise Connections

Ready to post? :mag: First, try searching for your answer.
Hi Everyone.

We are trying to configure a custom Signing certificate on our Enterprise SAML connections. We are using this approach Sign and Encrypt SAML Requests

{
	{ 
		"options" : {
			[...], // all the other connection options
		  "signing_key": {
				"key":"-----BEGIN PRIVATE KEY-----\n...{your private key here}...\n-----END PRIVATE KEY-----",
				"cert":"-----BEGIN CERTIFICATE-----\n...{your public key cert here}...\n-----END CERTIFICATE-----"
			}
    }
	}
}

However, every time we click on the Sign Request link on Authentication โ†’ Enterprise-> SAML โ†’ [Our connection] that says: " Download the certificate and give it to SAMLP that will receive the signed assertion so it can validate the signature." we get the same certificate.

We see its because that link calls OUR_DOMAIN/pem?cert=connection. How can we configure our Domain to provide a Custom Certificate for out customers

Hi @julio-rodriguez_ukg,

Welcome to the Auth0 Community!

Please see this article for more information on how to use a custom certificate to sign SAML requests: Use a Custom Certificate to Sign SAML Requests

Best,

Mary Beth

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.