Connecting Shibboleth based SP to Azure-Entra as IDP

[Bhagwat, Shrikant]

It is PEM format . Self Signed cert from Azure 

[root at iamweb-ap-ds2a shibboleth]# openssl x509 -in POC-AZ-IDP-SigningCert.pem -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:28:50:db:cd:86:3b:a4:42:8e:06:96:56:27:6f:91
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Microsoft Azure Federated SSO Certificate
        Validity
            Not Before: Jan 23 02:36:23 2025 GMT
            Not After : Jan 23 02:36:23 2028 GMT
        Subject: CN = Microsoft Azure Federated SSO Certificate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:55:65:4e:c4:6c:d0:f8:ef:98:6b:ef:f9:
                    dc:35:a0:0f:53:37:1f:ec:07:d4:cd:1e:18:ce:6d:
                    b2:74:fc:12:57:b7:6f:d7:5c:e8:99:0c:aa:5f:08:
                    bd:ea:6f:6b:b2:62:2b:5d:3a:2b:c4:39:c1:d9:85:
                    6a:3a:ba:c5:04:3e:7a:b5:b9:7d:60:0f:16:c1:8f:
                    be:74:91:fb:fe:e8:98:8e:4b:3f:d3:76:95:f7:99:
                    8c:be:45:57:94:cb:af:1a:5b:90:22:e0:f4:7f:c0:
                    aa:8e:85:aa:cc:c8:70:f1:af:68:a1:6d:35:8d:9c:
                    fb:38:44:6d:a6:28:02:69:20:3a:e5:3b:7c:c8:30:
                    e0:03:12:02:68:20:53:a6:75:12:21:cc:45:fb:14:
                    c9:17:cf:64:60:44:cf:d0:8c:08:23:b7:c8:82:63:
                    25:de:94:a6:36:e8:be:a9:7c:b0:6c:c8:5d:bb:b3:
                    e5:80:dd:52:48:21:6d:d7:6e:1a:c4:3f:13:bf:a5:
                    d2:b8:5a:d9:ac:44:41:a4:a8:67:0c:a1:bf:2f:e4:
                    4a:6e:0e:68:54:ae:0b:27:ea:71:db:d4:04:7f:69:
                    15:ac:8d:b3:b8:c6:8f:15:48:75:a0:25:bd:ac:c9:
                    22:0f:7c:13:6e:b6:40:5c:15:0a:7c:f9:ca:1c:87:
                    cb:29
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
         58:c9:1f:ec:2d:ef:6b:da:9c:e3:5f:7e:a2:63:9b:6b:9c:bd:
         83:c2:a5:6c:43:74:91:af:0b:93:e1:d1:2e:d4:05:4e:4c:c3:
         86:ae:cd:d5:82:6a:3a:3f:cf:78:47:cb:99:7f:6b:fe:21:82:
         d2:71:8a:f2:80:dd:23:fb:e2:03:66:75:8b:1b:71:ec:8c:72:
         37:c4:e2:25:1c:99:7a:5d:cb:be:c4:dc:7a:68:d1:c4:f7:91:
         34:45:d2:77:f7:c3:d9:5f:3f:fc:53:ee:5b:00:46:4f:28:da:
         5f:8f:66:6a:eb:44:28:5a:47:60:71:df:af:3c:cb:e2:9e:eb:
         52:ef:93:cd:0f:6b:cc:3f:03:8c:ce:e5:4d:b5:7e:83:a7:7f:
         02:cb:6d:84:dd:88:38:a9:69:f4:59:0f:de:bd:3a:f2:ca:9f:
         d0:6d:ec:41:fa:7a:f5:64:59:02:8b:40:f2:0c:6b:fa:e1:1d:
         05:25:da:3f:5d:cc:58:9a:55:83:93:e0:59:2c:f2:bf:10:12:
         cf:7d:21:24:ac:6c:d6:32:0f:3f:bd:77:44:f5:9b:19:62:17:
         4d:e0:94:f9:46:a3:9b:f8:7b:b1:36:fc:12:f4:9a:d9:2a:26:
         f1:e4:f4:55:41:6e:a6:f5:d7:9d:f8:17:2b:55:48:66:69:9c:
         93:16:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
[root at iamweb-ap-ds2a shibboleth]#



-----Original Message-----
From: Paul B. Henson <henson at acm.org> 
Sent: Friday, January 31, 2025 8:58 PM
To: Shib Users <users at shibboleth.net>
Cc: Bhagwat, Shrikant <shrbhagw at med.umich.edu>
Subject: Re: Connecting Shibboleth based SP to Azure-Entra as IDP

On Sat, Feb 01, 2025 at 01:22:17AM +0000, Bhagwat, Shrikant via users wrote:

> 2025-01-31 20:02:58 ERROR XMLTooling.CredentialResolver.Chaining : caught exception processing embedded CredentialResolver element: Unable to load certificate(s) from file (/etc/shibboleth/POC-AZ-IDP-SigningCert.cer).

What format is it in? If it came from windows you probably need to convert it to PEM format.
**********************************************************
Electronic Mail is not secure, may not be read every day, and should not be used for urgent or sensitive issues