Generate and Download a Certificate Bundle for Service Providers and Identity Providers for the IDR SSO Agent

In the Cloud Administration Console, you can generate a certificate bundle that contains the private key, public certificate, and certificate signing request (CSR) that you need when configuring an identity provider (IdP) or a service provider (SP) in an IDR SSO Agent deployment. For more information about certificates, see Cloud Access Service Certificates.

For IdP and SP connections you may generally use the certificate (cert.pem) file right from the zip file. However, some environments may require certificates to be signed by a trusted certificate authority. In this case you can send the certsign.req file to a certificate authority to be signed before uploading it to the appropriate endpoint.

1. In the Cloud Administration Console, navigate to one of the following Connection profile pages:
   • In the Add or Edit Connection wizard when you add or edit a SAML application.
   • In the Add Identity Provider wizard when you add or edit an identity provider.
2. Click Generate Certificate Bundle.
   Either the Generate SAML Certificate dialog box or the Generate Identity Provider Certificate dialog box appears.
3. In the Common Name (CN) field, enter the hostname of the HTTPS server for the service provider sending the authentication request, or the Integrated Windows Authentication (IWA) connector server.
4. Click Generate and Download.
   The certificate bundle is generated in ZIP format and contains your private key. Store this information in a secure location to protect against unauthorized access.
5. Download and extract the contents of the ZIP file.