
vfcaz (vfcaz) asked a question.
Is there a way to generate a report (or use the API) to list all app using SAML with SHA-1?
NIST formally declared SHA-1 as deprecated. Is there a quick way for me to determine which, if any, of our apps are using SHA-1 for the SAML signing certificates?

Hi @vfcaz (vfcaz),
Thank you for posting on the Okta community page!
I have done some research and it seems that there is no API or report that would return the signature algorithm, therefore I asume that manual action will be required. However, if you're leveraging any custom SAML applications that have been created via application wizard you should be able to find the algorithm information provided if you'd return them through /api/v1/apps/${applicationId} endpoint.
------------------------------------------------------------------------------------------------------------------------------------------------
Community members help others by clicking Upvote or Select as Best on responses. Try it today.