Configure SSO: Use a Token Signing Certificate

EnterWorks obtains the signing certificate in the following manner:

  1. EnterWorks will look for the file: 

    <drive>:\Enterworks\certs\token_cert.pem

    If it finds the file, it will pull the certificate out of it.

  2. EnterWorks will then look at the metadata. If a signing certificate is provided in the metadata, it will pull the certificate from the metadata and use it. If EnterWorks already has pulled a certificate from token_certs.pem file, EnterWorks will use the certificate it found in the metadata.

To configure EnterWorks to use the signing certificate:

  1. Open the create-enable-web-server-service.cmd script in an editor.
  2. Uncomment out the setting: samlSigningSPKeysPath.
  3. To tell EnterWorks to look for the token_cert.pem file, set the samlSigningSPKeysPath parameter to indicate the location of the token_cert.pem certificate file: 
    -samlSigningSPKeysPath=<drive>:\Enterworks\certs\saml
  4. Save the create-enable-web-server-service.cmd script.
  5. Use the create-enable-web-server-service.cmd script.