Signing XML files
Use the Pingfederate administrative console to sign XML files.
Steps
-
Go to System → Protocol Metadata → [.wintitle] File Signing**.
-
On the Select Metadata File tab, choose your metadata file.
-
On the Digital Signature Settings tab, select a signing certificate from the list.
If you have not yet created or imported your certificate into PingFederate, click Manage Certificates and use the Certificate Management configuration wizard to complete the task.
-
Clear the related check boxes to exclude the public key information and the raw key from the signed XML file.
-
Select a signing algorithm from the list.
The default selection is RSA SHA256 or ECDSA SHA256, depending on the key algorithm of the chosen signing certificate. Make a different selection if you and your connection partner have agreed to use a stronger algorithm. For a list of the available signing algorithms and their URIs, see Signing algorithms.
-
-
On the Export & Summary tab, click Export to save the digitally signed file.
-
Click Done.