# Importing new FederationMetadata.xml

**URL:** <https://forum.keycloak.org/t/importing-new-federationmetadata-xml/15572>\
**Category:** Configuring the server\
**Tags:** saml\
**Created:** [May 17, 2022, 8:45am UTC](https://forum.keycloak.org/t/importing-new-federationmetadata-xml/15572 "2022-05-17T08:45:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TPauli](https://avatars.discourse-cdn.com/v4/letter/t/df705f/32.png) [@TPauli](https://forum.keycloak.org/u/TPauli)\
**Post date:** [May 17, 2022, 8:45am UTC](https://forum.keycloak.org/t/importing-new-federationmetadata-xml/15572/1 "2022-05-17T08:45:30Z")

</div>

Hello everyone,

This is probably a rookie question, but I failed to find an answer to this, so I’m sorry if this was asked a million times before. I’ve also posted this to the Google mailing list ([https://groups.google.com/g/keycloak-user/c/4NAdyun2QF8](https://groups.google.com/g/keycloak-user/c/4NAdyun2QF8)). But the discussion on Discourse looks more lively to me. I hope it’s okay to post on both platforms.

I’m running a dockerized key cloak using the image [quay.io/keycloak/keycloak:16.0.0](http://quay.io/keycloak/keycloak:16.0.0).

I’ve set up an ADFS Server as Identity Provider and communicate with this server via SAML. While this setup works well, there is a new FederationMetadata.xml and a new certificate (as adfs.pem) on that ADFS server. As far as I understand, I can simply add the new certificate under **Validating X509 Certificates** , I can’t find the option to import new metadata. When I add a new Identity Provider, I can find the option to import Metadata right below **Requested AuthnContext Constraints** , but not in the settings of an already configured Identity Provider.

Am I right that can simply copy the content of adfs.pem to **Validating X509 Certificates** and is there a way to import the new FederationMetadata.xml, or do I have to set up the Identity Provider from scratch?

Best wishes,

Thomas
