How to retrieve certificate from metadata

Configured with SAML IdP in TID-W and need to renew certificate but the IdP is not external

• TID-W

• ADFS

• Signing Certificate

400: Bad Request Error Code: GENERAL_NONSUCCESS

1. Open the metadata file and find use="signing" entry

2. Copy the data from the <X509Certificate> element.

3. Paste it to a new text file.

4. Insert -----BEGIN CERTIFICATE----- to the beginning of the file .

5. Append -----END CERTIFICATE----- to the end of the file. For example:
    
   -----BEGIN CERTIFICATE-----
   MIICPTCCAaagAwIBAgIGAUIAVrpxMA0G
   ......
   96sa3ZdjPQkSZa48l6ZW86yLAECUXQ==
   -----END CERTIFICATE-----

6. Save the text file with a .CRT extension.