title: What to do with AWS Cognito's public key in ADFS
body: <p>I'm trying to configure AWS Cognito to work with ADFS as a SAML provider in a dotnet core 3.1 MVC application. I believe I have ADFS and Cognito correctly configured as I can log into the application using a user in ADFS. I am at a stage where I can login and logout, however when logging out ADFS throws the error:</p>
  <blockquote>
  <p>MSIS7054: The SAML logout did not complete properly.</p>
  </blockquote>
  <p>This does still log the user out of ADFS. I think I’ve narrowed it down to the SAML logout messages ADFS receives need to be signed. References: <a href="https://www.componentspace.com/Forums/9725/MSIS7054-The-SAML-logout-did-not-complete-properly" rel="nofollow noreferrer">here</a>, <a href="https://stackoverflow.com/questions/18853816/the-saml-logout-did-not-complete-properly">here</a> and <a href="https://stackoverflow.com/questions/51203817/what-is-the-use-of-signingcertificate-in-aws-cognito">here</a></p>
  <p><a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-console.html" rel="nofollow noreferrer">Amazon describe how to do this from there end</a></p>
  <blockquote>
  <p><em>To set up the SAML IdP to add a signing certificate:
  To get the certificate containing the public key which will be used by the identity provider to verify the signed logout request, choose
  Show signing certificate under Active SAML Providers on the SAML
  dialog under Identity providers on the Federation console page.</em></p>
  </blockquote>
  <p>However, I’m not sure how I take their public key (which is just a string) and provided that to ADFS. The only thing I can seem to find is an encryption tab, that takes a certificate file (Is there some conversion thing I need to do?). I have tried <a href="https://stackoverflow.com/a/66057621/7009375">this</a>, which is putting the key inside a .cert file and adding to the relaying party encryption tab of ADFS, however this did not work.</p>
  <p>Any help would be appreciated.</p>
  <p>Thanks, Adam</p>