Activating a Service Provider Certificate

Function

This API is used to activate a SAML signing certificate of a service provider. It can be called only from the organization's management account or from a delegated administrator account of a cloud service.

Authorization Information

The account root user has the permissions to call all APIs, but its IAM users must have the following identity policy-based permissions to call this API. For more information, see Permissions and Supported Actions.

Action	Access Level	Resource (*: Required)	Condition Key	Alias	Dependencies
IdentityCenter:serviceProvider:activeCertificate	Write	-	-	-	organizations:delegatedAdministrators:list

URI

POST /v1/identity-stores/{identity_store_id}/saml-certificates/{certificate_id}/active

**Table 1** Path parameters
Parameter	Mandatory	Type	Description
identity_store_id	Yes	String	Globally unique ID of an identity source.
certificate_id	Yes	String	Globally unique ID of a certificate in the identity source.

Request Parameters

**Table 2** Parameters in the request header
Parameter	Mandatory	Type	Description
X-Security-Token	No	String	Security token (session token) of your temporary security credentials. If a temporary security credential is used, this header is required.

Response Parameters

Status code: 200

Successful.

Status code: 400

**Table 3** Parameters in the response body
Parameter	Type	Description
error_code	String	Error code.
error_msg	String	Error message.
request_id	String	Unique ID of a request.

Status code: 403

**Table 4** Parameters in the response body
Parameter	Type	Description
error_code	String	Error code.
error_msg	String	Error message.
request_id	String	Unique ID of a request.
encoded_authorization_message	String	Encrypted error message.

Example Request

Activating a SAML signing certificate of a service provider

POST https://{hostname}/v1/identity-stores/{identity_store_id}/saml-certificates/{certificate_id}/active

Example Response

None

Status Codes

Status Code	Description
200	Successful.
400	Bad request.
403	Forbidden.

Error Codes

For details, see Error Codes.

Parent topic: Service Provider (SP) Management

Previous topic: Deleting a Service Provider Certificate

Next topic: Querying Service Provider Configurations

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot