Description
Use the following steps to create an X.509 certificate from the metadata file on the Flex Appliance Console:
1. Sign in to the Flex Appliance Console. Navigate to Settings > Single Sign-On. Under Appliance service provider URL, download the service provider metadata file.
2. Open the metadata XML file and copy the certificate contents under the tags <X509Certificate></X509Certificate>. Paste this content into a new file.
3. Add -----BEGIN CERTIFICATE----- to the beginning of the file and -----END CERTIFICATE----- to the end of the file, as follows:
-----BEGIN CERTIFICATE-----
// certificate content here
-----END CERTIFICATE-----
4. Save the file with the .pem extension.
5. Run the following command to create folds after every 64 characters to ensure that the certificate is valid:
fold -w 64 example.pem > new-example.pem
The certificate is now ready to be imported to the identity provider.