Choosing a decryption key (SAML 2.0) - PingFederate - 11.0

PingFederate Server

bundle
pingfederate-110
ft:publication_title
PingFederate Server
Product_Version_ce
PingFederate 11.0
category
Product
pf-110
pingfederate
ContentType_ce

As part of XML encryption, you must identify a certificate and key for PingFederate to use to decrypt incoming assertions or assertion elements.

For more information on XML encryption, see Specifying XML encryption policy (for SAML 2.0).

  1. Select the primary XML decryption key from the list.

    If you have not created or imported your certificate into PingFederate, click Manage Certificates. For more information, see Manage digital signing certificates and decryption keys.

  2. Optional: Select the secondary XML decryption key from the list.