# Digital certificates (addon federation)

## Definition

<p class="callout success">Soffid includes Digital certificate functionality as a security enhancement. You could add new Digital certificates, internal or external.</p>

If you select the external certificate, you could add a valid certificate to Soffid; If you select the internal certificate, Soffidl will generate a valid certificate.

## Screen overview

[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-08/scaled-1680-/HjR3L43dGkycqpH3-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-08/HjR3L43dGkycqpH3-image.png)

[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-08/scaled-1680-/o9CFZbG38mYWi9qC-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-08/o9CFZbG38mYWi9qC-image.png)

## Related objects

- [Identity providers](https://bookstack.soffid.com/books/soffid-4-reference-guide/page/identity-providers-addon-federation "Identity providers"): certificates can be used as two-factor authentication

## Standard attributes

#### Internal

- **Organization name**: organization name
- **Expiration date**: referring to the root certificate.
- **Device certificate**: Indicates if the certificate is for a device
- **Certificate duration (months)**: Referring to users' certificates.

<details id="bkmrk-image"><summary>Image</summary>

[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-08/scaled-1680-/YU14ZB4UqfPZiWjl-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-08/YU14ZB4UqfPZiWjl-image.png)

[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-08/scaled-1680-/91tSvjj3cKP7DKb0-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-08/91tSvjj3cKP7DKb0-image.png)

</details>#### External

- **Certificate:** root of the certification authority (pem file).
- **Organization name**: organization name (retrieved from the certificate).
- **Device certificate**: indicates if the certificate is for a device.
- **Script to guess the certificate owner**: script to compute the user name. Can use the certificate and subject variables. Should return a valid user name.

<details id="bkmrk-image-1"><summary>Image</summary>

[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-08/scaled-1680-/L3OEOqAoQ9MNYbsv-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-08/L3OEOqAoQ9MNYbsv-image.png)

[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-08/scaled-1680-/mhaP0jwG3AfaqZLB-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-08/mhaP0jwG3AfaqZLB-image.png)

</details>## Actions

#### Table actions

<table border="1" id="bkmrk-query-allows-to-sear-0" style="width: 100%;"><tbody><tr><td style="width: 17.5966%;">**Add new**</td><td style="width: 82.4034%;">Allows you to add a new certificate.

To add a new certificate it will be mandatory to fill in the required fields.

</td></tr><tr><td style="width: 17.5966%;">**Delete**</td><td style="width: 82.4034%;">Allows you to remove one or more certificates by selecting one or more records and next clicking this button.

To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation.

</td></tr><tr><td style="width: 17.5966%;">**Download CSV file**</td><td style="width: 82.4034%;">Allows you to download a CSV file with the digital certificates data.

</td></tr></tbody></table>

#### New token

<table border="1" id="bkmrk-apply-changes-allow-" style="width: 100%; height: 165.781px;"><tbody><tr style="height: 29.7969px;"><td style="width: 17.7187%; height: 29.7969px;">**Undo**

</td><td style="width: 82.2813%; height: 29.7969px;">Allows you to quit without applying any changes.

</td></tr><tr style="height: 29.7969px;"><td style="width: 17.7187%; height: 29.7969px;">**Next**

</td><td style="width: 82.2813%; height: 29.7969px;">Allows you to browse the wizard to create a new certificate.

</td></tr><tr style="height: 29.7969px;"><td style="width: 17.7187%; height: 29.7969px;">**Back**

</td><td style="width: 82.2813%; height: 29.7969px;">Go to theprevious step.

</td></tr><tr style="height: 46.5938px;"><td style="width: 17.7187%; height: 46.5938px;">**Apply changes**

</td><td style="width: 82.2813%; height: 46.5938px;">Allows you to save the data of a new certificate or to update the data of a specific certificate. To save the data it will be mandatory to fill in the required fields

</td></tr></tbody></table>