Updating Service Provider IDP SSO Certificate

General Pointers

• The configuration of your Identity Provider will dictate where the certificate needs to be updated as the certificate may need to be updated for both verifying the signature of incoming requests and encrypting assertions sent to the Service Provider.
• If your Identity Provider supports pulling metadata from a Service Provider's endpoint, it will be pulled from {YourSubDomainName}/handlers/metadata.ashx. For example, if your subdomain is HappyKitchens.modernsurvey.com, the metadata endpoint would be: 
  • HappyKitchens.modernsurvey.com/handlers/metadata.ashx
• If your Identity Provider is configured to verify signatures from the Service Provider, the new certificate should be configured to be used for signature verification alongside the current/outgoing certificate. This will put your Identity Provider in a state to be prepared when the current certificate/outgoing expires and the new certificate beings to be used by the Service Provider for signing.
  • If you remove the current certificate from the Identity Provider's signature verification your existing SSO connection will break.
  • The current/outgoing certificate can be removed from your Identity Provider after it has expired.