1

We are trying to use Siteminder for SSO in Marketing Cloud.

When pasting the metadata from Siteminder into a new SAML key, I get this error:

Expecting X509Certificate inside the KeyDescriptor element.

The exact same metadata can be used in Salesforce Service Cloud SSO settings without any errors.

Improve this question
1
  • I'm reopening this question because it because it appears in-scope, but it may need further details and information before anyone may be able to help you.
    – Samuel De Rycke
    Commented Sep 6, 2017 at 10:39

1 Answer 1

Reset to default
0

The Identity Provider with whom you are enabling SSO needs to provide you a metadata containing required fields such as Entity ID, Name ID format, Single Sign-On Service Location URL, Single Sign-On Service Binding and so on. Apart from this information, Identity Provider also needs to provide their certificate. They can provide it separately in which case, you can follow Guided Configuration and upload that certificate separately.

But they can also provide the certificate within the metadata document. In that case, you can paste the metadata file as it is.

In your case, it looks like IDP has provided you the metadata information but not the certificate.

Please follow this link: https://help.salesforce.com/articleView?id=mc_overview_create_a_key.htm&type=5

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .