---
title: "Generate Certificate Signing Request for IdP"
method: POST
path: "/api/v1/idps/{idpId}/credentials/csrs"
tags: ["IdentityProvider"]
---

# Generate Certificate Signing Request for IdP

`POST /api/v1/idps/{idpId}/credentials/csrs`

## Request

- Base URL: `https://your-subdomain.okta.com`
- URL: `https://your-subdomain.okta.com/api/v1/idps/{idpId}/credentials/csrs`
- Auth: API key in header `Authorization`

Generates a new key pair and returns a Certificate Signing Request for it.

## Path parameters

- `idpId` string, required

## Request body

- CsrMetadata
  - `subject` CsrMetadataSubject
    - `commonName` string
    - `countryName` string
    - `localityName` string
    - `organizationName` string
    - `organizationalUnitName` string
    - `stateOrProvinceName` string
  - `subjectAltNames` CsrMetadataSubjectAltNames
    - `dnsNames` string[]

## Response `201`

Created

- Csr
  - `created` string, date-time
  - `csr` string
  - `id` string
  - `kty` string

---

[API](https://skmtc.dev/okta/apis/okta-api.md) - [All operations](https://skmtc.dev/okta/apis/okta-api/llms.txt) - [OpenAPI document](https://skmtc.dev/okta/apis/okta-api/revisions/7e5249c30571?raw)