Find that the portal SSO is not working. It returns the error of the verification of the signature in the certificate idpCert.pem after renewal.
It's because in ADFS has ONE certificate originally , but the certificate will be expired next week, so one month before, ADFS will have one more certificate generated automatically and put it as secondary. Then two weeks before expiry, it will change the new certificate as the Primary and the old certificate as the secondary automatically. Later, the 2nd one will be removed from ADFS. That’s the way working in AFDS. that’s we see TWO certificates now.
We try to regenerate the metadata from the ADFS like the originally configuration
(simiar steps as http://blogs.splunk.com/2016/09/14/configuring-microsofts-adfs-splunk-cloud/)
And try to import the new xml (federationmetadata.xml) into the SAML configuration in the Splunk
It encounters the error “There are multiple cert,idepCertPath,idpCert.pem, must be directory"
Try to remove the idpCert.pem in the ./etc/auth/idpCerts/idpCert.pem.
And then re-import the metadata again but it encounters the “Sever Error”
Any way to fix it.
