1. Account Administration
  2. Authentication
  3. SAML Single Sign-on
  4. IdP Metadata and SAML Attributes
  5. IdP Requirements
  6. Extract an Encryption Certificate or Signing Certificate from the SP Metadata File

Extract an Encryption Certificate or Signing Certificate from the SP Metadata File

Use the following procedure if you must extract the encryption or signing certificate from the NetSuite Service Provider Metadata file. A Signing Certificate is only required if you are using an SP-initiated flow, or if you are using Single Logout (SLO).

To extract a certificate from the SP metadata file:

  1. Download the SP metadata file from your NetSuite account.

    1. Go to Setup > Integration > SAML Single Sign-on.

    2. Download the SP metadata file to your computer. Remember the location you save the file to.

  2. Create a new file in a text editor and enter the following text exactly as shown:

                    -----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

  3. Use a text editor to open the SP metadata file you saved to your computer.

  4. Copy the appropriate line from the SP metadata file.

    Certificate extraction example in a text editor.

  5. Paste the line you copied from the SP metadata file to the blank line between the -----BEGIN CERTIFICATE-----and -----END CERTIFICATE-----lines.

    Certificate example

  6. Save the PEM-encoded file.

  7. Follow your IdP’s documentation for providing the certificate file to your IdP (for example, upload the file, or paste the content of the file into a provided form.)

Related Topics

General Notices