Create a keystore with a valid expiration

A keystore is a file that contains keys and certificates that you use for encryption, authentication, and serving content over HTTPS. A valid expiration is any expiration date that is in the future.

1. Follow the steps in Creating a keystore for application data encryption.

Configure the keystore

Now that you have created a keystore, you need to configure it.

Open a keystore you just created by:

1. In the navigation panel of Dev Studio, click RecordsSecurityKeystore and select a keystore from the instance list.
2. Click Upload file.
3. Click Choose File, browse to the keystore file, and select it.
4. Click Upload file.
5. In the Keystore type field, enter the keystore file type: JKS, JWK, PKCS12, KEYTAB, or KEY.
6. In the Keystore password field, enter the password to the keystore file.
7. Click Save.

Re-export the Service Provider metadata into the Identity Provider metadata

The Service Provider and Identity Provider need to communicate with one another. To finalize the process, you need to export the updated SP metadata, and then add it into the Identity Provider.

1. In the side panel of Dev Studio, click RecordsSysAdminAuthentication service.
2. Select the SAML authentication service that you need to update.
3. In the Service Provider (SP) settings section of the SAML 2.0 tab, click the Download SP metadata text.
   Note: This will open a new tab with the system's metadata in XML.
4. Import the SP metadata into your Identity Provider.