---
title: Configuring metadata signing
description: Configure metadata signing using the PingFederate administrative console.
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:help_metadatasettingstasklet_dynamicconnectionsigningcertstate
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/help_metadatasettingstasklet_dynamicconnectionsigningcertstate.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: May 25, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Configuring metadata signing

Configure metadata signing using the PingFederate administrative console.

## About this task

PingFederate generates publicly available metadata for partners through the federation metadata endpoint, `/pf/federation_metadata.ping`. Although optional, signing the the metadata is recommended so that partners can verify the authenticity of the metadata.

## Steps

1. Go to **System > Protocol Metadata**.

2. In the **Metadata Settings** window, on the**Metadata Signing** tab select a certificate from the **Signing Certificate** list.

   If you have not yet created or imported your certificate into PingFederate, click **Manage Certificates** and use the **Certificate Management** configuration wizard to complete the task.

3. (Optional) Select a signing algorithm from the list.

   The default selection is **RSA SHA256** or **ECDSA SHA256** depending on the key algorithm of the chosen signing certificate. Make a different selection if you and your connection partner have agreed to use a stronger algorithm. The following table shows the URIs of the supported algorithms. For a list of the available signing algorithms and their URIs, see [Signing algorithms](pf_signing_algorithms.html).

   The public key of the metadata signing certificate is included as part of the metadata.

4. Click **Next**.

   |   |                                                                                                                                            |
   | - | ------------------------------------------------------------------------------------------------------------------------------------------ |
   |   | When editing an existing configuration, you can also click **Save** as soon as the administrative console offers the opportunity to do so. |