User Guide: Fannie Mae Federated Single Sign-On Manager

The Federated Single Sign-On Manager Tool is a powerful utility designed to streamline the configuration of certificates for customers’ IDP administrators (“IDP Administrators”). By leveraging this tool, IDP Administrators can effortlessly manage certificates, ensuring seamless integration with Fannie Mae applications and a smoother authentication process for customers and their end-users.

IDP Administrators will be able to perform the following configurations using the Fannie Mae Single Sign-On Manager:

Download SP certificates: IDP Administrators can download Fannie Mae’s certificates for customer side setup.
Upload and activate your IDP certificates: IDP Administrators can upload and activate their IDP certificates within our system.

Frequently Asked Questions

This tool is exclusively intended for IDP Administrators who utilize federated SSO with Fannie Mae.

IDP Administrators need to have the FEDSSO_Federation_IDP_Admin role to access this tool. Please reach out to customer admin for your organization to add this role to your Fannie Mae ID.

Fannie Mae Certificates are the Service Provider (SP) certificates utilized by Fannie Mae for federated SSO configuration purposes.

“Your certificate” refers to your company specific IDP certificates that must be confirmed within Fannie Mae systems to ensure seamless integration.

Only users with Administrator roles from your organization have the authority to change certificates.

Yes, you may add the FEDSSO_Federation_ReadOnly role to grant read-only access to selected business users.

Failure to update certificates may disrupt the federation SSO flow, resulting in users being unable to access Fannie Mae’s applications.

How to Set Up a New Fannie Mae Certificate

This section explains how to set up a new Fannie Mae Certificate.

Launch the Federation Portal application from Fannie Mae federated portal page.

Note: If you are an IDP Administrator and not able to see Certificate Management tile, please reach out to your Corporate Administrator to add the FEDSSO_Federation_IDP_Admin role. If you need the read only role, please reach out to your Corporate Administrator to add the FEDSSO_Federation_ReadOnly role.
From the Certificate Manager page, click on the Fannie Mae Certificates.

Note: In the Overview tab, you will see any certificates that are expiring soon, and you can click the View Your Certificates link, which will direct you to that particular certificate update.
From Fannie Mae certificates header, click Set Up Certificate.
Click Download Certificate.
You will see a pop-up message confirming the certificate is now downloading.

Note: Once you the download Fannie Mae Certificate, please configure the certificate in your system. You can always come back here to activate the new certificate after configuration.
Click the check box confirming you have configured the new certificate in your system, then click Continue.

Note: This is a critical step. Please make sure you have configured the certificate in your system before activating the certificate. Failure to configure the certificate before activation will result in access issues for all users in your organization.
The new Fannie Mae certificate is about to be activated. Click Activate Certificate to continue. This will deactivate the old certificate.
You will see a pop-up message confirming the certificate was successfully activated.
Click the View More button to see more information about the certificate.

Note: Please test with some users and make sure users are able to navigate to Fannie Mae federated SSO page to launch other applications.

How to Reactivate an Old Fannie Mae Certificate

Note: Please note that you will be able to reactivate the old certificate should you encounter issues, as long as the old certificate has been configured on your end and remains valid.

To reactivate an old certificate, click the Reactivate button.
Please make sure the certificate is configured in your system. Click the “I have configured the certificate” check box and then click Continue to Reactivate button.
Confirm that you wish to reactivate the old certificate by clicking on the Reactivate Certificate button. This will deactivate the current certificate.
Your old certificate has now been reactivated.

How to Set Up a New Customer Certificate

This section explains how to set up a new Customer Certificate.

Launch the Federation Portal application from Fannie Mae federated portal page.

Note: If you are an IDP Administrator and not able to see Certificate Management tile, please reach out to your Corporate Administrator to add the FEDSSO_Federation_IDP_Admin role. If you need the read only role, please reach out to your Corporate Administrator to add the FEDSSO_Federation_ReadOnly role.
From the Certificate Manager page, click on the “Your Certificates” tab.

Note: In Overview tab, you will see any Certificates that are expiring soon, and you can click View Your Certificates link to specifically select that certificate update.
To add a new certificate, click Add New Certificate.
Click the applicable button to either Upload File or Copy / Paste the new certificate.
If you select Upload File: drag or select file after the certificate has been configured in your system. Click Select File.
Select the certificate that you want to upload and click Open.
Make sure the file name is correct and click Upload.
You are now ready to activate the certificate. Click Activate.
You will see a pop-up message confirming the certificate was successfully activated.
If you select Copy / Paste: Copy and paste your certificate after the certificate has been configured in your system.
After pasting a copy into the box, click Activate New Certificate button.
After the new certificate is activated, your certificate status will show as Active and Primary on the page. Click the View More link to learn more about the certificate.
1. Once your Primary certificate has been uploaded, your previous Primary certificate will be listed as Secondary.
To delete a certificate that is not Primary, click on the View More button to show the Delete button and click on it.
A delete confirmation will appear. Make sure it references the correct certificate you want to delete and click Confirm Delete button.
1. You will see a pop-up message confirming the certificate was successfully deleted.