# Download signing certificate

Download the service-provider signing certificate for a dashboard SAML provider.

Source: https://statusdashboard.com/docs/api/status-dashboards/dashboards/sso/signing-certificate

`GET /app/dashboards/{id}/sso/signing-certificate`

Returns the service-provider signing certificate for the dashboard visitor pool. Requires the **SSO** feature entitlement.

Enable signing with [Toggle AuthN request signing](/docs/api/status-dashboards/dashboards/sso/authn-signing) first. While `signAuthnRequests` is false, this endpoint returns `409` and no certificate body.

Downloading the certificate does not change the signing flag. Returns `409` for OIDC providers.

***

## Path parameters
| Parameter | Description                |
| --------- | -------------------------- |
| `id`      | The UUID of the dashboard. |

***

## Request
See [API Basics](/docs/api) for required headers.

This endpoint takes no request body.

***

## Sample request
```bash
curl https://api.statusdashboard.com/app/dashboards/a1b2c3d4-e5f6-7890-abcd-ef1234567890/sso/signing-certificate \
  -H "Authorization: Bearer bcf847abf5c6:def456"
```

## Sample response
**Status: `200 OK`**

```json
{
  "certificate": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----\n"
}
```

***

## Response fields
| Field         | Type   | Description                                       |
| ------------- | ------ | ------------------------------------------------- |
| `certificate` | string | PEM-encoded service-provider signing certificate. |

***

## Error responses
| Status | When                                                                         |
| ------ | ---------------------------------------------------------------------------- |
| `403`  | SSO feature not enabled on the plan.                                         |
| `404`  | Dashboard not found or does not belong to the caller's organization.         |
| `409`  | No SAML provider configured, OIDC provider, or AuthN signing is not enabled. |