Skip to main content
Planview Customer Success Center

Updating the public keys for ADFS manually

Updating the public keys for ADFS manually includes the following steps:

    • Getting the ADFS server token signing thumbprint
    • Updating the Web.config file

Getting the ADFS server token signing thumbprint

  1. From the ADFS server, launch ADFS 2.0 Management console.
  2. Select Service > Certificates, and then double-click the Token-signing certificate.
  3. Select the Details tab.
  4. Select the Thumbprint field.
  5. To get the thumbprint value, remove all the spaces including the first space.

Updating the Web.config file

  1. Edit

    <cp_root>\Enterprise\RP-STS_ADFS\web.config

  2. Find the ida:FederationMetadataLocation key under the <appSettings> element and clear its value:

    <add key="ida:FederationMetadataLocation" value="" />

  3. Find the <issuerNameRegistry> element under <system.identityModel> and replace it with the following:

    <issuerNameRegistry type="System.IdentityModel.Tokens.ValidatingIssuerNameRegistry, System.IdentityModel.Tokens.ValidatingIssuerNameRegistry">

    <authority name="https://ADFS_FederationServiceName/a...services/trust">

    <keys>

    <add thumbprint="ADFS_Server_Token_Signing_Thumbprint" />

    </keys>

    <validIssuers>

    <add name="https://ADFS_FederationServiceName/a...services/trust" />

    </validIssuers>

    </authority>

    </issuerNameRegistry>