Skip to content
Cloudflare API
Start here
API Reference
Zero Trust
Identity Providers

SAML Certificate

Create SAML encryption certificate for Identity Provider
client.zeroTrust.identityProviders.samlCertificate.create(stringidentityProviderId, SAMLCertificateCreateParams { account_id } params, RequestOptionsoptions?): SAMLCertificateCreateResponse { created_at, uid, updated_at, 2 more }
POST/accounts/{account_id}/access/identity_providers/{identity_provider_id}/saml_certificate
ModelsExpand Collapse
SAMLCertificateCreateResponse { created_at, uid, updated_at, 2 more }

A SAML encryption certificate set containing current and optionally previous certificates for encryption key rotation.

created_at: string

Timestamp when the certificate set was created

formatdate-time
uid: string

Unique identifier for the certificate set

formatuuid
updated_at: string

Timestamp when the certificate set was last updated (e.g., during rotation)

formatdate-time
current_certificate?: CurrentCertificate { is_current, not_after, public_certificate, uid }

The currently active certificate used for encrypting SAML assertions

is_current: boolean

Indicates whether this is the currently active certificate

not_after: string

Certificate expiration date. Certificates are automatically rotated 30 days before expiration.

formatdate-time
public_certificate: string

PEM-encoded X.509 certificate containing the public key. Configure this certificate in your external SAML Identity Provider to enable encryption.

uid: string

Unique identifier for the certificate

formatuuid
previous_certificate?: unknown

The previous certificate, maintained during rotation to ensure continuity. Null if no rotation has occurred. Mirrors the structure of saml_certificate.