How to Generate a New IdP Certificate via API Using Postman

Jul 17, 2025

Single Sign-On

Okta Classic Engine

Okta Identity Engine

Overview

This article explains how to use Postman with the Okta Apps API to generate and update application certificates.

Applies To

Solution

It is highly recommended to test this in the Preview or test environment before making changes to the Production environment.

Follow the steps or video below.

Launch Postman and import the Okta Apps API collection. (See How to set up Postman with Okta.)
Run a Get App API call to get the app information. (It will be required later.)
- To get the ID of the app, run the List Apps API call.
Open the Generate Certificate API call under the Certificate Operations of the Apps collection.
Enter the App ID from step 2 above; simply replace {{appId}} with the App ID, and replace the {{validityYears}} with a number of years (for example, 5) to set years of validity and click Send to run the call.
- Make note of the "kid" ID in the response field. It will be required later.
Open the Update Application Certificate API call from the same collection above and enter the App ID.
Click on the Body tab, and fill out the information needed (name, label, signOnMode, and most importantly, the kid from step 4).
Validate that the certificate has been changed.