Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

To update your SAML signing certificate for Azure AD:

  1. (warning) Before you make these (or any other) changes to your Abiquo platform, create a backup
    In this case, on the Abiquo Server, back up your config folder

    Code Block
    languagebash
    # Back up the /opt/abiquo folder
    tar cvfz /opt/abiquo.tgz-$(date +%Y%m%d_%H%M%S) /opt/abiquo
  2. Create a new certificate following the Microsoft Azure documentation https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/tutorial-manage-certificates-for-federated-single-sign-on#create-a-new-certificate .  Here are the basic steps at the time this page was published

    1. Go to Azure Active DirectoryEnterprise applications and select your app

    2. Go to Single sign-onSAML Signing CertificateEditNew Certificate

    3. From Federation Metadata XML in SAML Signing Certificate, obtain a new metadata file and download it

  3. Find the metadata file in your Abiquo platform - it will be something like /opt/abiquo/config/saml/XX_samlsp_server.metadata.xml.
    Replace this file with the new file you downloadedNote that there are .
    Do not touch the identity provider metadata file.

  4.  Restart the Tomcat server:

    Code Block
    sudo service abiquo-tomcat restart

...