What certificate is needed for enabling SAML authentication?

[Martin22]

Hi,

I'm currently trying to implement SAML authentication on our Qlik Sense dev platform.

So I followed the steps described in the Knowledge Base, but I encountered difficulties on the SAML signing algorithm : I need to implement the SHA-256, which requires a certificate, but I can't find what certificate is needed, or where to upload it.

Can somebody help me on this ?

Best regards,

Martin.

[Maria_Halley]

@Martin22 

I will move this to the integration board instead.

[Damien_Villaret · Accepted solution]

Hello @Martin22 

The SP certificate used for SAML is the same as the one applied on the Qlik Proxy service

https://community.qlik.com/t5/Knowledge/How-to-change-the-certificate-used-by-the-Qlik-Sense-Proxy-t...

When it comes to SHA-256 with SAML, this certificate's private key cryptographic provider needs to be specifically "Microsoft Enhanced RSA and AES Cryptographic Provider"

https://community.qlik.com/t5/Knowledge/SHA-256-and-Converting-the-Cryptographic-Service-Provider-Ty...

Hope that helps.

[Martin22]

Hi,

Thank you for your answer, we're working on it.

Once we have the certificate, is there a specific folder where we have to paste it, so the virtual proxy automatically uses it ?

Best regards,

Martin.

[Damien_Villaret]

Hello @Martin22 

You just need to import it in the Windows mmc console as described in the link, then indicate the thumbprint in the QMC. There's a video with the steps in the article I previously sent you.

Best regards,