To use an external certificate for SAML signing, you must generate a Certificate Signing Request (CSR) from the Workspace ONE Access console. The CSR is sent to a certificate authority to generate the SSL certificate.
Note: A certificate generated without the CSR from the
Workspace ONE Access console is not supported.
Procedure
What to do next
When you receive the certificate, upload the certificate to the Workspace ONE Access service. The CA replaces the self-signed certificate.