---
title: "📋 SSO: Exporting and updating the SAML certificate (metadata) from IdP"
url: "https://support.ftapi.com/en/article/-sso-saml-zertifikat-metadaten-von-idp-exportieren-und-aktualisieren"
language: "en"
last_updated: "2026-06-22T07:11:35.103Z"
---

# 📋 SSO: Exporting and updating the SAML certificate (metadata) from IdP

This article is a guide for administrators on how to export the Federation Metadata XML from common Identity Providers (AD FS, Azure AD, Keycloak) to update the SAML certificate on the FTAPI server.

## Single Sign-On via SAML 2.0

The SAML certificate is contained in the `FederationMetaData.xml`, which you can export from your Identity Provider (IdP).

### Microsoft AD FS 2.0

1.  Open the **AD FS Management**.
2.  Navigate to **Service -> Endpoints** and scroll to the **"Metadata"** section.
3.  Note the path to the **FederationMetadata.xml** file.
4.  Download the file from your AD FS host, e.g., `https://<ADFShost>/FederationMetadata/2007-06/FederationMetadata.xml`.   
     

### Microsoft Entra ID

1.  In the Microsoft Entra ID portal, select **Enterprise applications**.
2.  Search for and select the FTAPI app.
3.  In the **Manage** section, select **Single sign-on**.
4.  In the **SAML Signing Certificate** section, find the **Federation Metadata XML** and download it.   
     

### Keycloak

1.  Log in to Keycloak and open the **Administration Console**.
2.  Select the appropriate realm and then click on **"Realm Settings"** in the left menu.
3.  Navigate to the **"General"** tab and find the **"Endpoints"** section.
4.  Here you will find a link labeled "SAML 2.0 Identity Provider Metadata".
5.  Download the metadata.

## **Related articles**

> #### [**📋 LDAP: Exporting LDAPS certificate via MMC or OpenSSL**](https://support.ftapi.com/de/article/-ldap-ldaps-zertifikat-uber-mmc-oder-openssl-exportieren)