Search code examples
azure-active-directorysamlspring-saml

SAML signing certificate- your role does not have permissions required to manage signing certificates


Receiving the follow error while configuring. help me fix on this issue

SAML signing certificate- your role does not have permissions required to manage signing certificates


Solution

  • To configure certificate you need to Have one of the following roles:

    1)Global Administrator
    2) Cloud Application Administrator
    3)Application Administrator
    4)owner of the service principal.
    

    You need to have one of these permissions To delegate the update of the SAML token signature and sign-in algorithm for SAML based single sign-on applications

     1)microsoft.directory/applicationPolicies/basic/update
     2)microsoft.directory/applications/authentication/update
     3)microsoft.directory/servicePrincipals/policies/update
    

    For more details refer this document