The 2026 Drupal Business Survey is open. Your response will help shape the future of the Drupal business ecosystem.Hello,
Problem/Motivation
I want to know how to fill specific fields in the SP configuration form. They are not documented in a clear manner to me.
For example the field named Certificate Location found on /admin/config/people/saml_sp. Which certificate file are we talking about? Is this the same X.509 certificate found on the IdP metadata file?
Same thing for Key Location. From where can get this? Is this something that must be generated on my server with a certificate or the ones found on IdP metadata?
What do you mean by Signatures and Encryptions Offered and Required? required and offered by whom?
Thank you in advance
Comments
Comment #2
jproctorSAML is typically (but not always) configured to sign or encrypt messages between the service provider (“SP”, your Drupal site) and the identity provider (“IdP”, the service actually providing authentication). Whether these are required is something you negotiate with whoever runs your IdP. If they are required, each end of that communication needs its own certificate and private key.
Those files are easily generated using
opensslor a similar utility. As noted, they should be someplace in the file system that PHP has access to (usually a subdirectory of your Drupal installation). Your certificate file can be part of your code repository (in Git or similar), but your private key should be excluded.Comment #3
jcisio commentedYou need to generate (or take them from somewhere) a private key and a certification, and give the full path there. For example, the following command to generate these files:
openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout test.key -out test.crtComment #4
no74hThank you guys for your quick reply!