Submit Feedback
Legacy Knowledge Base
Published Jul. 2, 2025

Generating SAML Metadata with HTTPS

Written By

Justin Choi

How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!

While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Issue

This article documents how to generate a SAML metadata XML file that also has HTTPS enabled.

Environment

  • Liferay Portal 6.2, DXP 7.0, DXP 7.1
  • Any web server 

Resolution

In order to generate a SAML metadata.xml file that has HTTPS enabled, the following steps are necessary:

  1. Generate a Java .keystore file so that the application server can run on a secure port with the appropriate Java security certificate.
  2. In the application server, enable the application server's secure ports, which is usually 8443 but could be 9443 depending on the app server's default configuration.
  3. If using a web server, you must enter the following in the portal-ext.properties: web.server.protocol=https. This ensures that the web server directs all traffic to go to the HTTPS enabled site.
  4. Once the application has started, navigate to https://{yourhostname}:*443. (For example, https://localhost:8443). Accept any security warnings in case the browser does not recognize that the security certificate as valid.
  5. Follow the steps to configure Liferay DXP's SAML in Control Panel and then enable the instance as either an IdP or SP. The linked article is for DXP 7.0. 
  6. Enter the following to generate the metadata.xml file: https://{yourhostname}:*443/c/portal/saml/metadata (for example: https://localhost:8443/c/portal/saml/metadata.
  7. When exporting the file, you should see all the URLs with HTTPS enabled.

Additional Information

Did this article resolve your issue ?
Legacy Knowledge Base
Did this article resolve your issue ?