Need help on WebSphere SAML SSO config setup

0
votes

I am following the below document to configure the SAML SSO for WAS 8.5.5 and we are stuck at the very first step. As per the guide, we are supposed to add an identity provider using metadata of the identity provider & then import the SAML token signer certificate. But in our case we have received a single file called Federation Metadata.xml from the external identity provider which has both metadata & SAML token signer certificate info with in the same file. So the question is how do i export Metadata & token signer certificate out of it to accomplish step 1.

https://www.ibm.com/support/knowledgecenter/en/SSAW57_8.5.5/com.ibm.websphere.nd.multiplatform.doc/ae/twbs_configuresamlssopartners.html

1
single-sign-onsamladfswebsphere-8

1 Answers

0
votes

You can extract the token signing certificate from the FederationMetadata.xml file via the following steps.

  1. Find the element <ds:Signature> in the FederationMetadata.xml file, then the <KeyInfo> element within it and then the <X509Certificate> element below that.
  2. Take the base64 string within the X509Certificate element and paste this into a new text document.
  3. Save and close the text document and change the extension from .txt to .cer. This should be the public portion of cert you can use to import.