How do I get a .pem file for ADFS SSO integration?

Note: This only applies to EOP versions before 3.6.11. Recent versions of the Teamserver utilize the x509 found within the SAML metadata.

Question

When configuring SSO with ADFS, Contrast requires me to provide a .pem file. How do I obtain this?

Answer

The .pem file comes from your ADFS server. You can obtain it by following these steps:

1. Log into the ADFS server and open the management console.
2. Right-click Service -> Edit Federation Service Properties.
3. Confirm the settings in the General tab match your DNS and cert names
4. Next, browse to the certificates and export the Token-Signing certificate.
   1. Right-click the certificate and select View Certificate.
   2. Under the Details tab, click Copy to File.
   3. In the Certificate Export Wizard opens, select Next.
   4. Ensure the No, do not export the private key option is selected, and then click Next.
   5. Select DER encoded binary X.509 (.cer), and then click Next.
   6. Select where you want to save the file and give it a name, and then click Next.
   7. Select Finish.
5. As the certificate is required to be in PEM format, you will need to convert this certificate using client or even online tools. For example, this can be done with the following openssl command: openssl x509 -inform der -in certificate.cer -out certificate.pem