title: Keycloak as a Service Provider - setting up a signing certificate
body: <p>How do I install a signing certificate in Keycloak when using Keycloak as a Service Provider (SP) that should connect to a (non-Keycloak) Identity Provider (IdP)?</p>
  <p>To be more precise, Keycloak should be used as an <em>Identity Broker</em> (as described in the <a href="https://www.keycloak.org/docs/latest/server_admin/#_identity_broker" rel="nofollow noreferrer">Keycloak documentation</a>) and the communication between the Keycloak SP and the IdP is going to be facilitated via the SAML 2.0 protocol.</p>
  <p>The Keycloak documentation contains <a href="https://www.keycloak.org/docs/latest/server_installation/#_setting_up_ssl" rel="nofollow noreferrer">information on how to install SSL certificates</a> for doing &quot;normal&quot; HTTPS communication e.g. in the browser, but I cannot find anything regarding the installation of signing certificates to be used in the backend-to-backend SAML communication with the IdP. Does anyone know how to do this?</p>
  <p>(Maybe only one certificate is installed into Keycloak, i.e. this certificate is used for both SAML communication and other non-SAML Keycloak HTTPS communication?)</p>