title: SAML Signing Certificate - CA Signed vs Self Signed
body: <p>I am SSO implementation engineer but lately found it challenging to convince the InfoSec team on using Self Signed Certificate vs. CA Signed Certificate for signing the SAML Assertion.</p>
  <p>As CA signing authorities are no longer giving out certificates more than 1 year validity it has become a gigantic task to co-ordinate, guide and update the SAML Certificates on the SP side of the things every year.</p>
  <p>I know there is no need for a CA cert to sign the SAML Assertion but I have to convince using Self Signed cert with 3 year validity or something.</p>
  <ol>
  <li><p>Are there any CAs that can give us 3 year CA Signed Certificate for SAML?</p>
  </li>
  <li><p>If not 1, what can be a solid way to make the InfoSec understand that there is no need for CA signed certs but a Self-signed Cert is fine with no security issues. Looking for some suggestions.</p>
  </li>
  </ol>
  <p>Thanks in advance.</p>