SAML Certificate Expiration Notification in Okta
Last Updated:
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
Okta notifies administrators of pending Security Assertion Markup Language (SAML) certificate expirations through the Tasks list in the Admin Console. Okta issues certificates with a 10-year validity period, and administrators must re-upload the SAML certificate to the Service Provider (SP) upon expiration. The user goal is to understand when and how Okta alerts administrators about these upcoming expirations to maintain service continuity.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Okta Integration Network (OIN)
Solution
How are pending SAML certificate expirations surfaced in Okta?
Pending SAML certificate expirations appear as entries in the Tasks list in the Okta Admin Console. Okta generates this task 60 days before the certificate's expiration date.
Related References
