Generate Azure Self Signed Certificate for SAML

AzureSAMLCert.ps1

# Generate a 5 year self signed cert without KeyUsage, Subject Key Identifier and Enhanced Key Usage
# As per: https://learn.microsoft.com/en-us/powershell/module/pki/new-selfsignedcertificate
$Certificate=New-SelfSignedCertificate –Subject "SAML SSO Certificate" -CertStoreLocation Cert:\CurrentUser\My -KeyUsage None -KeyAlgorithm RSA -KeyLength 2048 -KeyExportPolicy Exportable -NotAfter (Get-Date).AddYears(5) -SuppressOid "2.5.29.14","2.5.29.37"

# Exported DER binary public key file
Export-Certificate -Cert $Certificate -FilePath ".\SSO.cer"

# Exported PEM text format public key file
$pemFileContent = @(
 '-----BEGIN CERTIFICATE-----'
 [System.Convert]::ToBase64String($Certificate.RawData, 'InsertLineBreaks')
 '-----END CERTIFICATE-----'
)
$pemFileContent | Out-File -FilePath '.\SSO.pem' -Encoding ascii

# Exported PKCS12/PFX private key with a password of "password"
$Pwd = ConvertTo-SecureString -String "password" -Force -AsPlainText 
Export-PfxCertificate -Cert $Certificate -FilePath ".\SSO.pfx" -Password $Pwd