SAML Connection - Using the CRT Files for Signing Certificate

Knowledge Articles
1

Overview

This article explains how to convert the CRT files to a PEM or CER file for the SAML connection’s Signing Certificate field.

Solution

Currently, Auth0 supports .pem and .cer signing certificates through the Dashboard UI.

Please note that when updating the connection via the Management API, the entirety of the options object needs to be passed, not just what is changing, as this will override the current options object fully. While performing the PATCH to your SAML connection, update the ‘signingCert’ field with the new base64 encoded certificate.

  1. Run Get a Connection to view all available fields that need to be subsequently passed to the PATCH request.
  2. The Convert signing certificate to Base64 explains how to convert the .crt file to base64, which can then be uploaded via a Management API call to the SAML connection.
  3. Send a PATCH request to update the connection and update the ‘signingCert’ field with the new base64 encoded certificate.

Alternatively , use OpenSSL to convert the .crt file to a .pem file:

openssl x509 -in cert.crt -out cert.pem

That would output a .pem to upload via the Auth0 dashboard, which may be more straightforward.