SAML Certificate Expiration Notification in Okta
Nov 13, 2025
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
This article explains how administrators are notified of pending Security Assertion Markup Language (SAML) certificate expirations.
Applies To
- Okta Integration Network (OIN)
Cause
Okta normally issues certificates with a 10-year validity period. If a certificate expires, an administrator must re-upload the SAML certificate to the Service Provider (SP).
Solution
Pending SAML certificate expirations appear as an entry in the Tasks list on the Okta Admin Console.
This task appears 60 days before the certificate's expiration date.
Related References
