Enable PicketLink Federation subsystem /extension=org.wildfly.extension.picketlink:add(module=org.wildfly.extension.picketlink) /subsystem=picketlink-federation:add() reload Create Federation (let's say new_fed) and identity provider Using Web Console go to Configuration > Subsystems > PicketLink > select new_fed and click View > Key Store Click edit but don't enter any value Click save using CLI enter /subsystem=picketlink-federation/federation=new_fed/key-store=key-store:read-resource You get { "outcome" => "success" , "result" => { "file" => "undefined" , "password" => "undefined" , "relative-to" => undefined, "sign-key-alias" => "undefined" , "sign-key-password" => "undefined" , "key" => undefined } }