# Identity Provider Public Certificate from Okta fails to Upload to Mattermost

**URL:** <https://forum.mattermost.com/t/identity-provider-public-certificate-from-okta-fails-to-upload-to-mattermost/2155>\
**Category:** Troubleshooting\
**Created:** [August 26, 2016, 9:44pm UTC](https://forum.mattermost.com/t/identity-provider-public-certificate-from-okta-fails-to-upload-to-mattermost/2155 "2016-08-26T21:44:24Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![pmccarthy](https://avatars.discourse-cdn.com/v4/letter/p/c77e96/32.png) [@pmccarthy](https://forum.mattermost.com/u/pmccarthy)\
**Post date:** [August 26, 2016, 9:44pm UTC](https://forum.mattermost.com/t/identity-provider-public-certificate-from-okta-fails-to-upload-to-mattermost/2155/1 "2016-08-26T21:44:24Z")

</div>

#### Summary

Identity Provider Public Certificate from Okta fails to Upload to Mattermost

#### Steps to reproduce

Mattermost Enterprise Edition  
Version: 3.3.0  
Database: postgres

System Console \> AUTHENTICATION \> SAML

Upload **Identity Provider Public Certifcate** from Okta

[https://docs.mattermost.com/deployment/sso-saml-okta.html](https://docs.mattermost.com/deployment/sso-saml-okta.html)

#### Expected behavior

Expected behavior is for the certificate to upload properly

#### Observed behavior

After Uploading the certificate file, it displays **Could not save certificate file**

Okta provides a .cert file; I have a suspicion that this is not the format that Mattermost is expecting…

---

<div class="post-metadata">

**Author:** ![it33](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/it33/32/3_2.png) [@it33](https://forum.mattermost.com/u/it33)\
**Post date:** [August 26, 2016, 9:50pm UTC](https://forum.mattermost.com/t/identity-provider-public-certificate-from-okta-fails-to-upload-to-mattermost/2155/2 "2016-08-26T21:50:26Z")

</div>

Thanks @pmccarthy, any error messages in the logs?

---

<div class="post-metadata">

**Author:** ![pmccarthy](https://avatars.discourse-cdn.com/v4/letter/p/c77e96/32.png) [@pmccarthy](https://forum.mattermost.com/u/pmccarthy)\
**Post date:** [August 26, 2016, 10:05pm UTC](https://forum.mattermost.com/t/identity-provider-public-certificate-from-okta-fails-to-upload-to-mattermost/2155/3 "2016-08-26T22:05:08Z")

</div>

```
[2016/08/26 17:42:57 EDT] [EROR] /api/v3/admin/add_certificate:addCertificate code=500 rid=... uid=... ip=... Could not save certificate file [details: open /opt/mattermost/config/okta.cert: permission denied]
```

---

<div class="post-metadata">

**Author:** ![pmccarthy](https://avatars.discourse-cdn.com/v4/letter/p/c77e96/32.png) [@pmccarthy](https://forum.mattermost.com/u/pmccarthy)\
**Post date:** [August 26, 2016, 10:14pm UTC](https://forum.mattermost.com/t/identity-provider-public-certificate-from-okta-fails-to-upload-to-mattermost/2155/4 "2016-08-26T22:14:19Z")

</div>

Interesting. I just upgraded to Enterprise from Team Edition and it looks like I needed to redo these commands:

```
sudo chown -R mattermost:mattermost /opt/mattermost
sudo chmod -R g+w /opt/mattermost

```

The upgrade documentation should probably mention that

---

<div class="post-metadata">

**Author:** ![pmccarthy](https://avatars.discourse-cdn.com/v4/letter/p/c77e96/32.png) [@pmccarthy](https://forum.mattermost.com/u/pmccarthy)\
**Post date:** [August 26, 2016, 10:26pm UTC](https://forum.mattermost.com/t/identity-provider-public-certificate-from-okta-fails-to-upload-to-mattermost/2155/5 "2016-08-26T22:26:32Z")

</div>

I just submitted some Issues on github to update documentation

---

<div class="post-metadata">

**Author:** ![it33](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/it33/32/3_2.png) [@it33](https://forum.mattermost.com/u/it33)\
**Post date:** [August 26, 2016, 10:31pm UTC](https://forum.mattermost.com/t/identity-provider-public-certificate-from-okta-fails-to-upload-to-mattermost/2155/6 "2016-08-26T22:31:19Z")

</div>

Thanks @pmccarthy, highly appreciated! I’ve proposed adding a step in the release process to review our upgrade and install guides for issues like this: [https://github.com/mattermost/docs/issues/404](https://github.com/mattermost/docs/issues/404)