Updating SAML certificates from VMware Cloud Director

Configuring the server
1

Hi

My SAML certificates in a Cloud Director tenant expired and I’ve regenerated a new pair but I can’t find a way to update them at the Keycloak realm gracefully. I guess I cloud try to remove the existing SAML connection and just create a new one but that seems less than ideal.

Is there a documented process for such a case?

Keycloak Server v. 20.0.1, Cloud Director 10.4.2

KR, Siggy

2

Yup, seems that removing the old ClientID/SAML configuration in Kc was at least a working option. Just import the updated service provider metadata file as a new client and you should be good to go. Make sure to carry over any customizations in the client config.