Change SSO metadata certificate for SSO 8.9.x onwards

How to change the Ubisecure SSO metadata certificate for SSO 8.9.x onwards?

Requirement

• If you want to change the self-signed certificate in SSO to CA signed certificate

• If old SSO metadata certificate is about to expire.

Starting SSO 8.9.x

• You generate a private key and sign a CSR with it and send the CSR to the CA. You will get a certificate from the CA and install it.

Details related to creation of keys, associating them, creating CSR and Adding certificate can be found in below documents:

Key rotation - SSO | Keyrotation SSO Introduction

Management API - SSO | ManagementAPI SSO UsingManagementAPItomanagekeysUsingManagementAPItomanagekeys