<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00008Vvd4bCABOkta Classic EngineSingle Sign-OnAnswered2026-05-18T09:01:42.000Z2022-12-15T22:07:16.000Z2022-12-19T16:20:06.000Z

vfcaz (vfcaz) asked a question.

Is there a way to generate a report (or use the API) to list all app using SAML with SHA-1?

NIST formally declared SHA-1 as deprecated. Is there a quick way for me to determine which, if any, of our apps are using SHA-1 for the SAML signing certificates?


  • flaviu.vrinceanu1.5628408972654734E12 (Customer Success Service Delivery)

    Hi @vfcaz (vfcaz)​,

     

    Thank you for posting on the Okta community page!

     

    I have done some research and it seems that there is no API or report that would return the signature algorithm, therefore I asume that manual action will be required. However, if you're leveraging any custom SAML applications that have been created via application wizard you should be able to find the algorithm information provided if you'd return them through /api/v1/apps/${applicationId} endpoint.

     

    ------------------------------------------------------------------------------------------------------------------------------------------------

    Community members help others by clicking Upvote or Select as Best on responses. Try it today.

    Expand Post
    Selected as Best
  • flaviu.vrinceanu1.5628408972654734E12 (Customer Success Service Delivery)

    Hi @vfcaz (vfcaz)​,

     

    Thank you for posting on the Okta community page!

     

    I have done some research and it seems that there is no API or report that would return the signature algorithm, therefore I asume that manual action will be required. However, if you're leveraging any custom SAML applications that have been created via application wizard you should be able to find the algorithm information provided if you'd return them through /api/v1/apps/${applicationId} endpoint.

     

    ------------------------------------------------------------------------------------------------------------------------------------------------

    Community members help others by clicking Upvote or Select as Best on responses. Try it today.

    Expand Post
    Selected as Best
This question is closed.
Loading
Is there a way to generate a report (or use the API) to list all app using SAML with SHA-1?