CIsco ISE - Error when opening STS SAML Identity provider

[G3000LEE]

Has anyone came across the following error when trying to upload a XML config to the STS profile:

‘Signing certificate validation failed, error: The IdP signing certificate expired. Reconfigure SAML Identity Provider with updated metadata’

Cisco ISE 2.7

Thanks

[hslai]

This means the metadata XML file contains a field for the signing certificate of your STS SAML IdP and that certificate has expired according to the system time of your ISE deployment. Please check the XML file. Likely you would be able to extract the certificate and verify its expiration date. Check your IdP and renew/update its signing certificate before re-exporting the metadata file.