Import Keycloak IdP provider’s certificate for validate signed SAML AithnRequest

In Keycloak IdP provider’s metadata, received from Surecomp, find the element <KeyDescriptor use="signing">, copy only Base64-encoded value of the element <ds:X509Certificate> and save it in a text file, e.g. named sp_signing.cer.

1. Select your SAML-based application (e.g. AzureRivo)
2. Go to Single sign-on tab
3. Scroll to the section shown below .Click Edit.

   

4. Verification Section 

   

5. Select Require verification certificates
6. Click Upload certificate

7. After upload the file sp_signing.cer – click OK and Save.