Search code examples
c#.netasp.netpingfederateacs

PingIdentity Federation meta data export for ACS - not exporting with a Digital Signature?


Does anyone have any experience with importing meta data files from Ping Identity into an ACS provider?

I'm logged into my Ping Identity admin system, all fine, no problem. Then, when I export the idP file... no digital signature is included within it and thus I cannot import this file into ACS as it complains that there's no signature included.

Has anyone else faced this issue and have any ideas on a workaround? I understand it's pretty intricate, so fingers crossed.


Solution

  • Are you trying to sign the meta-date file you're exporting or include the dsig signing key (or both)?

    When you export from PF Admin GUI (My Server --> Administrative Functions --> Metadata Export) one of the options in the export wizard is for "Metadata Signing" (which signs the metadata using the private key you specify). The next step in the wizard is where you specify your "Signing Key" that the IDP will use.

    HTH - Ian