Update your SAML signing certificate for Azure AD

This page describes how to update the signing certificate for using Azure Active Directory with SAML in Abiquo.

To update your SAML signing certificate for Azure AD:

  1. Before you make these (or any other) changes to your Abiquo platform, create a backup
    In this case, on the Abiquo Server, back up your config folder

    # Back up the /opt/abiquo folder tar cvfz /opt/abiquo.tgz-$(date +%Y%m%d_%H%M%S) /opt/abiquo
  2. Create a new certificate following the https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/tutorial-manage-certificates-for-federated-single-sign-on#create-a-new-certificate .  Here are the basic steps at the time this page was published

    1. Go to Azure Active DirectoryEnterprise applications and select your app

    2. Go to Single sign-onSAML Signing CertificateEditNew Certificate

    3. From Federation Metadata XML in SAML Signing Certificate, obtain a new metadata file and download it

  3. Find the metadata file in your Abiquo platform - it will be something like /opt/abiquo/config/saml/sp_metadata.xml
    Replace this file with the new file you downloaded.
    Do not touch the identity provider metadata file.

  4.  Restart the Tomcat server:

    sudo service abiquo-tomcat restart

 

 

Copyright © 2006-2024, Abiquo Holdings SL. All rights reserved