X.509 certificates for SAML
Store and activate the necessary IdP certificates for your SAML configuration.
The X.509 certificates are the IdP certificates that a SAML configuration uses. After you install a certificate, you can add as many certificates as necessary. When there are multiple certificates, the system uses the first active certificate that is found. If you set the URL for the Metadata URL from which IDP properties are imported field, the system automatically polls the IdP for a current, valid certificate when your certificate is no longer valid. It appends this certificate to your instance, and uses it for your active SAML configuration.
Note: Polling occurs if the IdP is accessible outside of your network.
[Omitted image "x-509-certificate-saml.png"] Alt text: X.509 certificates
--- title: X.509 certificates for SAML description: Store and activate the necessary IdP certificates for your SAML configuration. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/authentication/x-509-certificate-sso.html release: australia product: Authentication classification: authentication topic_type: concept last_updated: "2026-11-06" reading_time_minutes: 1 breadcrumb: [SAML 2.0 configuration using Multi-Provider SSO, SAML, Multi-Provider single sign-on \(SSO\), Authentication, Access Management] --- # X.509 certificates for SAML Store and activate the necessary IdP certificates for your SAML configuration. The X.509 certificates are the IdP certificates that a SAML configuration uses. After you install a certificate, you can add as many certificates as necessary. When there are multiple certificates, the system uses the first active certificate that is found. If you set the URL for the **Metadata URL from which IDP properties are imported field**, the system automatically polls the IdP for a current, valid certificate when your certificate is no longer valid. It appends this certificate to your instance, and uses it for your active SAML configuration. **Note:** Polling occurs if the IdP is accessible outside of your network. \[Omitted image "x-509-certificate-saml.png"\] Alt text: X.509 certificates
| title | X.509 certificates for SAML |
| description | Store and activate the necessary IdP certificates for your SAML configuration. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/platform-security/authentication/x-509-certificate-sso.html |
| release | australia |
| product | Authentication |
| classification | authentication |
| topic_type | concept |
| last_updated | 2026-11-06 |
| reading_time_minutes | 1 |
| breadcrumb | SAML 2.0 configuration using Multi-Provider SSOSAMLMulti-Provider single sign-on \(SSO\)AuthenticationAccess Management |