title: Export Token Signing certificate private key from ADFS
body: <p>I am implementing a SSO mechanism with a <strong>Service Provider (SP)</strong> by using ADFS as <strong>Identity Provider (idp)</strong>.</p>
  
  <p>The SP regular website offers integration with ADFS so it was enough to setup the SP as Relying Partner in my ADFS and provide them the <strong>Token Signing certificate</strong>. </p>
  
  <p>The <strong>mobile app</strong> of the SP does not offer integration with ADFS, therefore they require a <strong>web application</strong> to be built (SSOApplication) that bridges the SSO mechanism between SP and ADFS. The SP redirects the request to SSOApplication that in the background, by using SAML, queries the ADFS and then, if authentication is approved, sends the response to the SP.</p>
  
  <p>SSOApplication correctly communicates with ADFS but I cannot sign the <strong>SAML response</strong> for the SP because in the Token Signing certificate, contrarely to the SSL certificate, there is no option to export the private key (although MS claims it is possible <a href="http://technet.microsoft.com/en-us/library/cc784075%28v=ws.10%29.aspx" rel="nofollow">here</a>). The SP requires the same certificate for both Web and Mobile App entry points, therefore I cannot use two different Token Signing certificates.</p>
  
  <p>Moreover, this very certificate is used by other SPs that communicate with my ADFS, therefore if I change certificate I have to communicate the new certificate to the other SP integrated with our ADFS. Is there any way to export the private key from the Signing Token certificate? Is there any way to use differnet Token Signing certificates for different realying parties in ADFS?</p>
  
  <p>PS: In ADFS I can export the key of the SSL certificate but there is not the same option for Token Signing. </p>