Enable Request Signing for SAML

This optional feature requires creating a key store containing the certificate of a custom certificate authority and a private key that is used to sign the authentication request.

Run this command in your shell to create a keystore.p12 key store file using the certificate in the certificate.crt file and a corresponding private key in the privateKey.key file:
openssl pkcs12 -export -in certificate.crt -inkey privateKey.key -out keystore.p12
After entering the command, you will be prompted to enter and verify an export password to protect the key store file. Remember this password as you will need it in step #6.

Switch to the CLI of the XCC and execute the following instructions one by one:

sudo su -s /bin/bash xcc_backend
cd /var/lib/xorlab/xcc/config/work/ag_local/auth/auth

Copy the keystore.p12 file into the folder specified above.

Execute the following instructions one by one:

git add .
git commit -m "Adding keystore file"
exit

Open the auth/auth/auth.yml file using the XCC Expert Editor.

In the saml2AuthBackends section, under your IdP config (here as mySaml), add the following block and enter your key store password as the password parameter:

auth.yml

saml2AuthBackends:
  mySaml:
    idp:
      signingKeyStore:
        file: keystore.p12
        password: the-key-store-password

Click Publish. The authentication configuration becomes active within about one minute.

The Authentication service restarts automatically and applies the new configuration.