This article explains the step-by-step process for replacing a signing certificate in the Okta Admin Console Session for Custom Security Assertion Markup Language (SAML) applications. It guides the user through selecting the application, navigating to the SAML Settings, and uploading the new certificate.

• Custom Security Assertion Markup Language (SAML) apps with an SP Signing Certificate
• Single Sign-On (SSO)

The following video shows how to replace a service provider signing certificate in Okta.

1. In the Okta Admin Console Session, click Applications.
2. Select the application intended for certificate replacement.
3. Select the General tab.
4. Scroll to SAML Settings and click Edit.
5. Click Next, then click Show Advanced Settings.
6. Find the Signature Certificate file name.

7. Click on Browse files....
8. Select the .crt file to upload and click Upload Certificate.
9. Click Next.
10. Click Finish.