zcity (zcity) asked a question.
Does Okta offer automated rotation of the SP signing certificate?
I've noticed that other IdPs, such as PingFederate and Azure AD, offer the capability to maintain a list of SP certificates for verifying the signature of SAML requests. However, it appears that Okta currently supports only one signature certificate at a time. Consequently, to replace an expiring signature certificate, Okta requires a manual rotation process, which inherently carries a higher risk of causing downtime. Can someone please verify if this is accurate? Additionally, is there any intention to implement automated rotation in the future?
Hi, @zcity (zcity)
Thank you for posting on our Community page!
Okta does not currently support this feature.
You can suggest this on the Okta Community page by going to the Community→ Ideas tab. Features suggested in our community are reviewed and can be voted and commented on by other members of the community, therefore making it much easier for the engineering team to understand the priorities that you have for feature requests.
Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Like or Select as Best on responses. Try it today.
_____________________________________________________________________________