Here is just one of the many possible ways you might have to configure your third party IdP.

This example describes how to use your SP metadata file to create the Service Provider Certificate that is required when configuring a Salesforce organization as an IdP.

The information for the Service Provider Certificate can be extracted from the metadata and saved as a separate file.

1. In Notepad, create a new blank txt document.

2. Copy the base64 certificate information from within the "X509Certificate" element of the metadata (see the Example SP Metadata File (one_admin_settings_sso_metadata_file.dita)).

   1. Paste this data into the Notepad document, add the start and end line shown below to enclose the base64 data, then save the file with a .pem extension.

   -----BEGIN CERTIFICATE-----
   MIIBtTCCAR6gAwIBAgIEUlfjbTANBgkqhkiG9w0BAQsFADAfMR0wGwYDVQQDExR5ZGV2Ln
   RodW5kZXJoZWFkLmNvbTAeFw0xMzEwMTExMTM5MjVaFw0xNDAxMDkxMTM5MjVaMB8xHTAb
   BgNVBAMTFHlkZXYudGh1bmRlcmhlYWQuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQ
   KBgQCEMJZ5mCPXwKZP50bgb+3xCpd47odBZu+pfgGpt9qV5+QZlhAxJcmbXNBE/2F7j8urZ
   lOjh43V+loHIZRjVsp2DgPNLyGtxZI3YfG7M7vFArZLMSFbROap9o3tWK4qYn8p4TYqvQUQh
   B3D6yPO8sxUfx6JntFBGtwsNSaPiFNVOQIDAQABMA0GCSqGSIb3DQEBCwUAA4GBABVe7IBAq
   XPZEAdYRYT+Hm6LPhhrkWsl7qsMQjMxCF9buwv2qlouOEWZhmrqtNgelT3vI7vBExIZzKkD8
   gawpixJaetL4mGOINxNXJhc/ii3t3KPMKLrciH/+VNF2TlpoUo3odOWGC1jW3qFTSiaS/tBh
   T881fCu7GEFTxALiPwj
   -----END CERTIFICATE-----

   This file can then be uploaded as part of configuring your IdP.

   Other IdPs may have different requirements for the formatting of the certificate information.