ADFS Certs and Providers

[Alastairb25]

Hi,

 

Could someone give me a provider and product type they have used for completing a CSR for ADFS?

 

 

Thanks,

Alastair

[dmj]

There are two types of certificate you will need.

 

1) The SAML signing cert. this is used to sign the SAML assertions and is typically a long lived self signed certificate. You don't need to get a third party to sign that as you include the public key in the ADFS metadata. Just create a new keypair with openssl and use that.

 

2) The webserver certificate. I guess this is what you are asking about ? personally I'd use an ACME domain validated certificate and have the renewal scripted. Otherwise you could just use the same cert that you use for your other servers and add the SAN for the ADFS server.