Using BigFix Inventory SSL certificate for SSO based on SAML

By default, a self-signed certificate is used during the SSO configuration. However, you can reuse the BigFix Inventory server SSL certificate.

Procedure

1. Navigate to the path install_dir\wlp\usr\servers\server1\server.xml.
2. Remove only keyAlias="samlsp and keyStoreRef="SPKeyStore from server.xml.
3. Open BigFix Inventory in a web browser.
4. Get the information about the certificate.
   1. Click on the Not secure label on the URL to display the window.
   2. Select the Certificate is not valid option above.
   3. Click on the Details tab.
   4. Export the certificate in base 64 encoded format.
5. Add the exported certificate to the Active Directory Federation Certificate (ADFS).
   1. Navigate to ADFS management.
   2. Proceed to Active Directory Management Service > Relaying Party Trust.
   3. Right-click on the available relying party and select Properties.
   4. Navigate to the encryption option.
   5. Remove the existing certificate.
   6. Click on Browse, and in the dropdown menu, select All Files.
   7. Upload the downloaded certificate.
6. Restart the BigFix Inventory server.