Certificate Rollover LocalServiceProviderConfiguration

SAML for ASP.NET Core
1

Hi,
We need to do a certificate rollover for a local certificate used in LocalServiceProviderConfiguration.
According to the certificate guide “a local certificate can be specified as part of the partner provider configuration” and the following example shows how to do this for LocalIdentityProviderConfiguration / PartnerServiceProviderConfigurations.
Does this approach apply to LocalServiceProviderConfiguration / PartnerIdentityProviderConfigurations as well?

example:
“LocalServiceProviderConfiguration”: {
“Name”: “<a href=“http://ServiceProvider”,”>http://ServiceProvider",
“LocalCertificates”: [
{
“FileName”: “certificates/sp.pfx”,
“Password”: “password”
}
]
},
“PartnerIdentityProviderConfigurations”: [
{
“Name”: “<a href=“http://IdentityProvider1”,”>http://IdentityProvider1",
“LocalCertificates”: [
{
“FileName”: “certificates/sp1.pfx”,
“Password”: “password”
}
],
“PartnerCertificates”: [
{
“FileName”: “certificates/idp.cer”
}
]
}

2

Yes, it does. You can specify LocalCertificates in your PartnerIdentityProviderConfiguration. These LocalCertificates will be used for this partner IdP rather than the LocalCertificates specified in the LocalServiceProviderConfiguration.

3
[quote]
ComponentSpace - 1/16/2020
Yes, it does. You can specify LocalCertificates in your PartnerIdentityProviderConfiguration. These LocalCertificates will be used for this partner IdP rather than the LocalCertificates specified in the LocalServiceProviderConfiguration.
[/quote]

Great! Thanks!
4

You’re welcome.