Require Information on certificate x509 for saml 2 update

[nehasr1288]

Hi ,

I have been trying to generate certificate for saml configuration but they all give error "could not parse csr " when placed for validation.

When I check for validate certificate on servicenow, there my certificate is validated.

I am very new to this topic and unable to understand how it works. Can someone please help me on how I should proceed

[lks]

What is the format type of your certificate that you're using?

[nehasr1288]

Hi Lalit,

I was looking forward for ssl certificates for servicenow to mention in the saml2 configuration properties as x509

[lks]

True, they are SSL certificates. How did you get that certificate? There are two possible ways:

1. If it is available in your IdP metadata then you just import IdP metadata and platform extract it self and you special efforts required for that.
2. Otherwise, you get that SSL certificate from your IdP. Here it depends, in which format you're getting the copy of SSL certificate e.g. .CER, .DER or .PEM.

If it is in DER format, the certificate will remain as an attachment when you create it else if it is in PEM format then you see the SSL certificate populated within below template

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

I am not really clear at what stage you're and in which format is your certificate...

[nehasr1288 · Accepted solution]

Hi,

The answer to my question is the 'signing certificate' that I need to obtain from some known provider or prepare a self signed certificate. Then in x509 certificate category , you create a javastore certificate and attach this signed certificate to the record.Then you copy the sys_id of this certificate record and paste it in the glide system property.Then you generate a metadata out of this from your IDP record. The PEM format x509 certicate that is mentioned in the IDP record is obtained from the Active Directory.So now the metadata you generated from the IDP can be provided to the AD admin to enable a hand shake