To Enable Certificate Revocation List Checking for SAMLv2

1. In the OpenSSO Enterprise Console, click the Configuration tab.

2. Click the Global sub tab.

3. Click SAMLv2 Service Configuration.

4. Check the box for XML Signing Certificate Validation.

5. Check the box for CA Certificate Validation. This step is optional.

6. Click Save.

7. Restart the web container.