Where I need to add certificate in ADFS 2.0

Question

I had researched following articles and I had configured ADFS and SAML Response was received successfully in relaying party.

To add relaying party I refereed this article:

In this configuration they have given sample page to send SAMLAuthnRequest by calling https://<>/adfs/ls/IdpInitiatedSignOn.aspx. What I need is to generate SAMLRequest and need to authenticate with adfs.

For that, I had referred here and here

There, They had specified that I need to generate a private key and certificate with public key and associate it with relaying party.

Please any one suggest me where I need to add that certificate? In some articles they have given token signing certificate. But it is used to sign the SAMLResponse only.

Answer 1

The certificate that the RP uses needs to be generated by the RP not by ADFS - it's not an ADFS certificate.

So you need to generate a certificate with a private key and store it on the RP side. The certificate details need to be in the RP metadata which is imported by ADFS.

That way ADFS knows what certificate to use when it checks the signature.