---
title: "Add X.509 Certificate Public Key"
method: POST
path: "/api/v1/idps/credentials/keys"
tags: ["IdentityProvider"]
---

# Add X.509 Certificate Public Key

`POST /api/v1/idps/credentials/keys`

## Request

- Base URL: `https://your-subdomain.okta.com`
- URL: `https://your-subdomain.okta.com/api/v1/idps/credentials/keys`
- Auth: API key in header `Authorization`

Adds a new X.509 certificate credential to the IdP key store.

## Request body

- JsonWebKey
  - `_links` object
  - `alg` string
  - `created` string, date-time
  - `e` string
  - `expiresAt` string, date-time
  - `key_ops` string[]
  - `kid` string
  - `kty` string
  - `lastUpdated` string, date-time
  - `n` string
  - `status` string
  - `use` string
  - `x5c` string[]
  - `x5t` string
  - `x5t#S256` string
  - `x5u` string

## Response `200`

Success

- JsonWebKey
  - `_links` object
  - `alg` string
  - `created` string, date-time
  - `e` string
  - `expiresAt` string, date-time
  - `key_ops` string[]
  - `kid` string
  - `kty` string
  - `lastUpdated` string, date-time
  - `n` string
  - `status` string
  - `use` string
  - `x5c` string[]
  - `x5t` string
  - `x5t#S256` string
  - `x5u` string

---

[API](https://skmtc.dev/okta/apis/okta-api.md) - [All operations](https://skmtc.dev/okta/apis/okta-api/llms.txt) - [OpenAPI document](https://skmtc.dev/okta/apis/okta-api/revisions/7e5249c30571?raw)