Skip to content

Commit

Permalink
Link certs
Browse files Browse the repository at this point in the history
  • Loading branch information
ajfarkas authored May 24, 2024
1 parent 91f0b83 commit 5d0305a
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions _articles/saml.md
Original file line number Diff line number Diff line change
Expand Up @@ -51,8 +51,8 @@ If, when logging in to the SAML Sinatra sample app, you get an error saying:
This is usually caused by a mismatch between the IdP certificate used to sign the response, and the recorded signature of the certificate which is saved in the environment variable `idp_cert_fingerprint` (either in config/application.yml, or the environment variables in the deployed environment).

To fix this, you'll first need to get the X509 Certificate from the appropriate SAML metadata endpoint, ie `https://idp.dev.identitysandbox.gov/api/saml/metadata2024` for `https://dev-identity-saml-sinatra.app.cloud.gov/`.
The local `identity-saml-sinatra` app uses the certificate from `identity-idp`, so that XML can be found at `identity-idp/config/artifacts.example/local/saml2024.crt`.
To fix this, you'll first need to get the X509 Certificate from the appropriate SAML metadata endpoint, ie ([https://idp.dev.identitysandbox.gov/api/saml/metadata2024]) for ([https://dev-identity-saml-sinatra.app.cloud.gov/]).
The local `identity-saml-sinatra` app uses the certificate from `identity-idp`, so that XML can be found at [identity-idp/config/artifacts.example/local/saml${YEAR}.crt](https://github.com/18F/identity-idp/tree/main/config/artifacts.example/local/).

Edit it to look like a normal certificate (or find the orig), e.g.,
```
Expand Down

0 comments on commit 5d0305a

Please sign in to comment.