Step 5: Create a certificate in the destination environment

POST {{apiPath}}/environments/{{destinationEnvID}}/certificates

Create a certificate in the destination environment using a POST {{apiPath}}/environments/{{destinationEnvID}}/certificates request. Copy and save the certificate ID. You'll use it when creating the IdP.

  • The usageType value must be set to SIGNING.

  • The file entry must reference the PEM or PKCS7 file containing the source environment key you downloaded in the initial step. Creating the certificate using the PEM or PKCS7 file transfers the key from the source environment to the destination environment.

Note: If the certificate used by the IdP in the destination environment doesn't match the key used by the source environment application, the authentication flow fails.

For more information, see Create Certificate with PKCS7 or PEM File.

Request Body

[{"name"=>"usageType", "value"=>"SIGNING", "datatype"=>"string"}, {"name"=>"file", "value"=>nil, "datatype"=>"null"}]

HEADERS

KeyDatatypeRequiredDescription
Authorizationstring
Content-Typestring