How to Download SAML Service Provider Certificate in Azure and Apply to Storefront Deployment

1. Navigate to https://portal.azure.com/

2. Click "Enterprise applications"

3. Click "Your SAML Enterprise Application"

4. Click "Single sign-on"

5. Click "Edit".

6. Click "New Certificate".

7. Click "Save".

8. Click "..." and select "Make certificate active".

Alert: Activating the new certificate will invalidate the old one, affecting SSO login functionality. To minimize disruption, ensure this is done outside regular hours or notify users that SSO will be temporarily unavailable.

9. Click "..." again and select "Base64 certificate download".

Tip: The Base64 certificate will be downloaded to your local machine. To open the .cer file, right-click on it, select 'Open With,' then choose 'Choose Another App' and select Notepad. This will allow you to copy the certificate string.

10. Navigate to https://your.deployment.com/

11. Click "Extensions"

12. Click "SAML Service Provider"

13. Click the "Certificate (Base64 string) field.

14. Press [[ctrl]] + [[v]] or [[Right mouse button]] + [[Paste]] to insert the Base64 string.

15. Click "Update".