Replacing a missing SAML certificate If the Certificate module displays a blank page, the SAML 2.0 certificate record has been deleted. You can replace the missing certificate by manually creating a certificate record. Before you beginRole required: admin Procedure Navigate to System Definition > Certificates. Create a new record called SAML 2.0. Important: You MUST use this name. Click SAML 2 Single Sign-on > Certificate. In the PEM Certificate field, enter the value of the ds:X509Certificate element from your IdP's metadata. Click Save.