Home/ Questions/Q 9252501
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-18T10:57:37+00:00

What type of certificate is required for SAML2 Logout with ADFS2? I’ve noticed that

  • 0

What type of certificate is required for SAML2 Logout with ADFS2? I’ve noticed that ADFS2 requires that LogOut request be signed by the relying party and verified within ADFS2. I’m assuming we are supposed to sign (with private key) within the relying party and provide ADFS2 with the public key to verify. Can I get some details as to what type of certificate is required for this?

NOTE: I am speaking only to the SAML2 protocol and NOT WS-Federation. WS-Federation does not require Logout requests be signed by the relying party.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You can use a self-signed certificate – the algorithm is RSA – I normally use key size 2048.

    In the ADFS RP – Properties – Advanced – set the hash algorithm to SHA-1.

    • 0