A notice occurs when the self-signed certificate in the Salesforce - Okta Single Sign On (SSO) trust relationship expires soon.

• Salesforce Self-Signed Certificate
• Update
• Okta Classic Engine

NOTE: Before proceeding, please note that all of the required actions are on Salesforce's side. The Okta integration is not involved in any way. Since the process might undergo changes, please contact Salesforce support for more details if needed.

Follow these steps to create and add a self-signed certificate to update the Salesforce - Okta SSO trust relationship.

1. Create one within Salesforce under the Security Controls > Certificate and Key Management.

2. Click Create Self-Signed Certificate:

3. Click Save.
4. Locate the Okta Single Sign-On settings under Security Controls > Single Sign On Settings. Use the drop-down next to Request Signing Certificate to select the new certificate.

5. Save the settings.