# SAML SP Signing Certificate Change to a Public Cert

**URL:** <https://forum.keycloak.org/t/saml-sp-signing-certificate-change-to-a-public-cert/5921>\
**Category:** Configuring the server\
**Tags:** saml\
**Created:** [November 12, 2020, 4:32am UTC](https://forum.keycloak.org/t/saml-sp-signing-certificate-change-to-a-public-cert/5921 "2020-11-12T04:32:05Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![magnus](https://avatars.discourse-cdn.com/v4/letter/m/e9c0ed/32.png) [@magnus](https://forum.keycloak.org/u/magnus)\
**Post date:** [November 12, 2020, 4:32am UTC](https://forum.keycloak.org/t/saml-sp-signing-certificate-change-to-a-public-cert/5921/1 "2020-11-12T04:32:05Z")

</div>

Hi (my first post), I’m trying to integrate keycloak with an SAML IdP, loading IdPMetadata -\> save all good but when I look at the SP Metadata I see the a selfSigned Certificate for the Realm (yes signing is needed), my question is how do I replace the with a Public Certificate? I’m running in kubernetes deployed using helm Keycloak v10 and I have HA postgresql StatefulSet.