Joomla

Here we will explain how to update the SAML Service Provider (SP) certificates in Joomla using the miniOrange SAML plugin.

Overview

You can update the SP certificates using one of the following methods:

• Method 1: From Joomla Administrator (Enterprise version only)
• Method 2: Manual update via file system

Method 1: Update via Joomla Administrator (Enterprise Version)

Follow the Steps Below:

1. Log in to Joomla Admin Panel
   • Go to your Joomla Administrator dashboard
2. Navigate to Plugin Settings
   • Go to: Components → miniOrange SAML Single Sign-On
3. Open Custom Certificate Tab
   • Click on the Custom Certificate tab
4. Upload Certificate Details
   • X.509 Public Certificate
     • Open the sp-certificate.crt file in a text editor
     • Copy the complete content (including: —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—–)
     • Paste it into the Public Certificate field
   • X.509 Private Key
     • Open the sp-key.key file
     • Copy the complete content
     • Paste it into the Private Key field
5. Save Changes
   • Click the Upload button to apply changes

Method 2: Manual Certificate Update via File System

Use this method if you prefer manual configuration or are not using the UI upload option.

Step 1: Access Joomla Root Directory

• Navigate to your Joomla installation folder on the server.

Step 2: Locate Certificate Directories

For miniorange SAML SP Standard Plugin Plan

Go to: [Joomla-Root]/plugins/authentication/miniorangesaml/saml2/cert/

For miniorange SAML SP Premium / Enterprise Plugin

You must update certificates at both of the following locations:

1. Authentication plugin directory: [Joomla-Root]/plugins/authentication/miniorangesaml/saml2/cert/
2. User plugin (SAML Logout) directory: [Joomla-Root]/plugins/user/samllogout/cert/

Step 3: Replace Certificate Files

Upload and overwrite the following files in the required directory/directories:

• sp-certificate.crt (Public Certificate)
• sp-key.key (Private Key)

Step 4: Verify File Details

• Ensure filenames remain exactly the same (case-sensitive)
• Do not change file extensions
• Confirm files are placed in the correct directories

Step 5: Backup (Recommended)

• Before replacing, download and save the existing cert folders from all locations

Important Notes:

• Standard Plan: Update certificates in one location only
• Premium / Enterprise Plan: Update certificates in both directories, otherwise SAML logout or related flows may fail

Post-Update Configuration

After updating the certificates in Joomla:

• Upload the new Public Certificate (sp-certificate.crt) to your Identity Provider (IdP)
• This step is required to maintain secure SAML communication