diff --git a/postinst b/postinst
index 5510398..8cbf569 100644
--- a/postinst
+++ b/postinst
@@ -26,6 +26,16 @@ case "$1" in
             echo "..done"
         fi
 
+        if [ ! -f /etc/$NAME/certs/saml.crt -a ! -f /etc/$NAME/certs/saml.key ]; then
+            echo -n "Generating key material..." >&2
+            openssl genpkey -algorithm rsa -pkeyopt rsa_keygen_bits:2048 -out /etc/$NAME/certs/saml.key >&2
+            openssl req -x509 -new -out /etc/$NAME/certs/saml.crt -subj '/CN=whocares' -key /etc/$NAME/certs/saml.key -days 3650 >&2
+            chown root:$GROUP /etc/$NAME/certs/saml.crt /etc/$NAME/certs/saml.key
+            chmod 640 /etc/$NAME/certs/saml.crt /etc/$NAME/certs/saml.key
+            echo "..done" >&2
+        fi
+
+
         echo -n "Fixing permissions.."
         chown $USER:$GROUP /var/lib/$NAME /var/run/$NAME /var/log/$NAME
         chown $USER:$GROUP /var/lib/$NAME/data /var/lib/$NAME/sessions