Forums

Hi
The IdP (PingFederate) metadata will contain 2 certificates: the first is to sign the metadata themselves, the second to sign the SAML response. 

From the SAML.config. I only can see PartnerIdentityProvider. May I know how to configure the above into the SAML.config?

<PartnerIdentityProvider Name="x"
          Description="xxx"
          SignAuthnRequest="true"
          SingleSignOnServiceUrl="https://xx.com"
          PartnerCertificateFile="Certificates\LIVE\x.cer"/>

The saml.config doesn't include the certificate to verify the metadata signature. The PartnerCertificateFile specifies the certificate to use to verify signatures on SAML messages send by the IdP.

Regards
ComponentSpace Development