Certificate

The IdP's signing certificate as a downloadable PEM. Public — the same cert is embedded in /metadata. SPs that don't ingest metadata (e.g. Google Workspace's manual SSO setup) upload this file to verify our signed assertions.

Without kid this is the current signing cert. With kid it is that specific published cert — notably the staged (pending) one, so an SP can be pre-configured with the new cert before activation switches signing onto it (make-before-break).

Query Parameters

Response Body

curl -X GET "https://example.com/v1/idp/saml/certificate"

null

{  "detail": [    {      "loc": [        "string"      ],      "msg": "string",      "type": "string",      "input": null,      "ctx": {}    }  ]}