<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00009TT0E1CALOkta Classic EngineAdministrationAnswered2025-10-11T09:01:02.000Z2023-07-19T15:20:03.000Z2023-07-20T15:40:09.000Z

KevinT.27053 (Customer) asked a question.

Way to view which Identity Provider's certificates are going to expire soon?

We've set up several Identity Providers for our clients. Is there any way to view the expiration dates for the certificates across the board? We want to proactively reach out to clients to tell them when their certificate's expiration is upcoming so we can get an updated one.


  • flz9z (flz9z)

    Hi Kevin,

    Okta IdP certificate standard expiration period is10 years, If this doesn't meet your requirements . You have an option to generate an IdP certificate whose validity upto 2 years.This can be done with the help of Okta Identity Provider API in postman.

  • Paul S. (Okta, Inc.)

    Hello @KevinT.27053 (Customer)​ Thank you for reacting out to our Community!

     

    At this time there are only 2 ways to view the validity of the certificate: manually and though API.

    Manually, you can take the certificate from the metadata and decode it with a third party site

    Through API using the API call :api/v1/idps/IDPID/credentials/keys Note that you need toc hange the IDPID with the unique ID of you IDP

    Please our doc here:

    https://developer.okta.com/docs/reference/api/idps/#list-keys

    Additionally you can extend the validity for that cert as well using API, please see doc here:

    https://support.okta.com/help/s/article/How-to-generate-a-new-IdP-certificate-via-API-using-Postman?language=en_US

     

    Community members help others by clicking Like or Select as Best on responses. Try it today.

    Expand Post
This question is closed.
Loading
Way to view which Identity Provider's certificates are going to expire soon?