
KevinT.27053 (Customer) asked a question.
We've set up several Identity Providers for our clients. Is there any way to view the expiration dates for the certificates across the board? We want to proactively reach out to clients to tell them when their certificate's expiration is upcoming so we can get an updated one.

Hi Kevin,
Okta IdP certificate standard expiration period is10 years, If this doesn't meet your requirements . You have an option to generate an IdP certificate whose validity upto 2 years.This can be done with the help of Okta Identity Provider API in postman.
Hello @KevinT.27053 (Customer) Thank you for reacting out to our Community!
At this time there are only 2 ways to view the validity of the certificate: manually and though API.
Manually, you can take the certificate from the metadata and decode it with a third party site
Through API using the API call :api/v1/idps/IDPID/credentials/keys Note that you need toc hange the IDPID with the unique ID of you IDP
Please our doc here:
https://developer.okta.com/docs/reference/api/idps/#list-keys
Additionally you can extend the validity for that cert as well using API, please see doc here:
https://support.okta.com/help/s/article/How-to-generate-a-new-IdP-certificate-via-API-using-Postman?language=en_US
Community members help others by clicking Like or Select as Best on responses. Try it today.