Export ssl certificate and private key from store for SAML SSO

1. Click Start, and then click Run....
2. Type mmc, and then click OK. The Microsoft Management Console (Console) window opens.
3. In the Console1 window, click the File menu, and then select Add/Remove Snap-in.
4. In the Add or Remove Snap-in window, select Certificates, and then click Add.
5. In the Certificates snap-in window, select Computer Account, and then click Next.
6. In the Select Computer window, select Local Computer, and then click Finish.
7. In the Add or Remove Snap-in window, click OK.
8. In the Console1 window, click + to expand the folder.
9. Right click on certificates and select certificate that you want to export.
10. Follow the steps choose base 64 and then fill certificate name say "abc.cert", then save the file in your folder.
11.  Similar to above point now, right click on certificate, select export private key option, then sytem will ask you add a password for that, fill that and note it in separate file also for future usage.
12. Follow the steps and save .pfx file in your folder.
13. Click OK.
14. Close the Console 1 window, and then click No to remove the console settings.

Next we'll discuss SAML SSO implementation from Service provider.

Install SSL certificate on windows server in IIS7

Here are few simple steps to install ssl certificate in IIS7.

1. Go to  Internet Information Services (IIS) Manager window, select server.
2. Double click on Server Certificates.
3. In Actions pane on the right, click on Complete Certificate Request....
4. To locate your certificate file, click ....
5. In the Open window, select *.* as your file name extension, select your certificate (it might be saved as a .txt, .cer, or .crt), and then click Open.
6. In the Complete Certificate Request window, enter a Friendly name for the certificate file, and then click OK.
NOTE: For Wildcard SSL certificates make sure your Friendly Name to matches your Common Name (i.e. *.coolexample.com).
7. In the Internet Information Services (IIS) Manager window, select the name of the server where you installed the certificate.
8. Click + beside Sites, select the site to secure with the SSL certificate.
9. In the Actions panel on the right, click Bindings....
10. Click Add....
11. In the Add Site Binding window:
    • For Type, select https.
    • For IP address, select All Unassigned, or the IP address of the site.
    • For Port, type 443.
    • For SSL Certificate, select the SSL certificate you just installed, and then click OK.
12. Close the Site Bindings window.
13. Close the Internet Information Services (IIS) Manager window. Your SSL certificate installation is complete.
14. Double click on ssl settings, select Accept radio button and apply changes, now website will start working with "https"