We’re Still Here to Help (Even Over the Holidays!) - find out more here.
Forum Discussion
Solved
Does Dropbox SAML SSO support IdP self-signed certificates?
Hello everyone,
I'm integrating Dropbox (as the Service Provider) with our internal IdP using SAML SSO and would like to confirm a few things:
- Does Dropbox support using a self-signed certificate on the IdP side for signing SAML Assertions or for the certificate uploaded in metadata?
- If self-signed certificates are supported, what operational or validation considerations should we be aware of? If not supported, what alternatives do you recommend?
Thanks for your patience Ziv
Dropbox SAML SSO does support IdP self signed x.509 certificates. As long as the certificate is provided in standard PEM format and included in your IdP metadata, Dropbox can use it to validate signed SAML assertions.
If you use a self signed certificate, just be sure it is kept up to date and that your team has a process for rotating it before expiration. There is no requirement for the certificate to come from a public certificate authority.
You can find more details about configuring SSO with Dropbox here: https://help.dropbox.com/security/sso-admin
2 Replies
- Dell_Dropbox
Community Manager
Ziv Thanks for dropping by the community. I just wanted to provide a quick update that I'm looking into tracking down an answer for you on this. I'll provide an update as soon as I hear back.
- Dell_Dropbox
Thanks for your patience Ziv
Dropbox SAML SSO does support IdP self signed x.509 certificates. As long as the certificate is provided in standard PEM format and included in your IdP metadata, Dropbox can use it to validate signed SAML assertions.
If you use a self signed certificate, just be sure it is kept up to date and that your team has a process for rotating it before expiration. There is no requirement for the certificate to come from a public certificate authority.
You can find more details about configuring SSO with Dropbox here: https://help.dropbox.com/security/sso-admin
