Replacing a missing certificate for SAML If the Certificate module displays a blank page, the SAML 2.0 certificate record has been deleted. You can replace the missing certificate by manually creating a certificate record. Before you beginRole required: admin Procedure Navigate to System Definition > Certificates. Create a new record called SAML 2.0. Important: You MUST use this name. This requirement is only true if you are not using Multiple-Provider single sign-on (SSO). Click SAML 2 Single Sign-on > Certificate. In the PEM Certificate field, enter the value of the ds:X509Certificate element from your IdP's metadata. Click Save.