---
title: "ezgh sso applications idp-certificate"
description: "Print the SAML IdP's signing certificate as PEM, to give a service provider."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ezgh sso applications idp-certificate

{/* Generated by ezgh-cli's internal/tools/clidocs from the ezgh command tree. Don't edit: change the command's help in ezgh-cli and regenerate. */}

```sh
ezgh sso applications idp-certificate <application> [--next] [flags]
```

Print the directory's active SAML signing certificate (with `--next`, its successor, published 90 days before the active one expires) as PEM, alone on stdout, for service providers that take a certificate file rather than the IdP's metadata. -o json prints the certificate's record instead.

Part of [`ezgh sso applications`](/cli/reference/sso-applications).

## Examples

```sh
ezgh sso applications idp-certificate Slack > ezgh-sso.pem
```

## Flags

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--next` | boolean |  | the next certificate, which signs once the active one expires |

This command also takes the [global flags](/cli/reference#global-flags).

Source: https://docs.ezghcloud.com/cli/reference/sso-applications-idp-certificate/index.mdx