Help Center
Help Center
Getting Started and Quick Guides
Users
Administrators
🧩Area: Administrators
🎓 Administrator Onboarding
SecuMails
Outlook Add-In (Classic Outlook)
Outlook Add-In (new Outlook)
FTAPI Gateway
Trust Networks
SecuRooms
SecuRooms Drive
SecuForms
Server Settings
General Server Settings
📋 User Account Cleanup: Automatically deactivate or delete inactive accounts📋 User Management: Creating user accounts manually, automatically, or via AD📋 User management: Assigning and changing group memberships📋 User Management: Setting a password for "unregistered" usersEmail delivery: Sender of delivery notifications📋 Email delivery: Emails are not arriving or are landing in spam (DNS configuration)📋 G.Data Virus Scanner: Configuring MIME types for allowed file types📋 Group Management: Configuring Permissions, Licenses, and Priority Rules📋 LDAP: Exporting LDAPS certificate via MMC or OpenSSL📋 Limits: Configuring size and download limits per group and product❓MySQL: Upgrade from 8.0 to 8.4📋 OpenSSL: Converting certificate formats (.cer, .crt, .pem) to .pfx📋 SecuPass: Activate and set up end-to-end encryption (E2E)📋 SecuPass: Resetting end-to-end encryption📋 Security: Restrict available security levels per group📋 SSO: Renewing SAML credentials for a Relying Party (RP)📋 SSO: Setting up SAML Single Sign-On with ADFS📋 SSO: Exporting and updating the SAML certificate (metadata) from IdP📋 SSO: Adjusting token lifetime on ADFS server via PowerShell and console📋 System: Setting up a custom SMTP relay for deliveries and notifications📋 System: Configuring Login Disclaimer (Terms of Use) for Users📋 Windows: Create a .p12 / .pfx certificate from a .p7b file
Templates
Miscellaneous
Download Center
Changelog

📋 SSO: Exporting and updating the SAML certificate (metadata) from IdP

This article is a guide for administrators on how to export the Federation Metadata XML from common Identity Providers (AD FS, Azure AD, Keycloak) to update the SAML certificate on the FTAPI server.

Single Sign-On via SAML 2.0

The SAML certificate is contained in the FederationMetaData.xml, which you can export from your Identity Provider (IdP).

Microsoft AD FS 2.0

  1. Open the AD FS Management.
  2. Navigate to Service -> Endpoints and scroll to the "Metadata" section.
  3. Note the path to the FederationMetadata.xml file.
  4. Download the file from your AD FS host, e.g., https://<ADFShost>/FederationMetadata/2007-06/FederationMetadata.xml. 
     

Microsoft Entra ID

  1. In the Microsoft Entra ID portal, select Enterprise applications.
  2. Search for and select the FTAPI app.
  3. In the Manage section, select Single sign-on.
  4. In the SAML Signing Certificate section, find the Federation Metadata XML and download it. 
     

Keycloak

  1. Log in to Keycloak and open the Administration Console.
  2. Select the appropriate realm and then click on "Realm Settings" in the left menu.
  3. Navigate to the "General" tab and find the "Endpoints" section.
  4. Here you will find a link labeled "SAML 2.0 Identity Provider Metadata".
  5. Download the metadata.

Related articles

📋 LDAP: Exporting LDAPS certificate via MMC or OpenSSL

Was this article helpful?

English
Powered by Product Fruits