SAML Signing Certificate - Azure AD

Question

SAML Signing Certificate - Azure AD

HA 26

HI there,

I recently replaced a signing certificate as it was due to expire today, however, the expiry status is now showing 'Expired' against the SSO application, why won't it change to the expiry date of the new certificate which is in 3 years time?
This has not however impacted users SSO to the application itself

Has anyone seen this behavior before?

Thank you

Marilee Turscak-MSFT 37,276 Reputation points Microsoft Employee Moderator

2022-07-01T20:39:44.74+00:00

Hi @HA ,

Probably an obvious question, but did you make sure you selected "Make Certificate Active" on the SAML Signing Certificate page? Also, when you initially rolled the certificate over, did you select the new date in the calendar?

https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/tutorial-manage-certificates-for-federated-single-sign-on

I have reached out to the product team to see if there are any other issues that might cause this behavior.
HA 26 Reputation points

2022-07-02T21:03:34.467+00:00

Hi there,

Thanks you for replying and yes I selected "Make Certificate Active" on the page and left the 3 year default expiry date on it
Yes any help from your team will be appreciated, It's strange as to why it is showing 'Expired'

Thank you

Answer accepted by question author

0 additional answers

Your answer

Marilee Turscak-MSFT 37,276 Reputation points Microsoft Employee Moderator

2022-07-01T20:39:44.74+00:00

Hi @HA ,

Probably an obvious question, but did you make sure you selected "Make Certificate Active" on the SAML Signing Certificate page? Also, when you initially rolled the certificate over, did you select the new date in the calendar?

https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/tutorial-manage-certificates-for-federated-single-sign-on

I have reached out to the product team to see if there are any other issues that might cause this behavior.
HA 26 Reputation points

2022-07-02T21:03:34.467+00:00

Hi there,

Thanks you for replying and yes I selected "Make Certificate Active" on the page and left the 3 year default expiry date on it
Yes any help from your team will be appreciated, It's strange as to why it is showing 'Expired'

Thank you

Answer 1

Marilee Turscak-MSFT 37,276 Microsoft Employee Moderator

Hi @HA ,

The product team just got back to me that this is a known bug that they are working to fix. I wasn't aware of this issue but as long as there is an expired certificate (irrespective of whether it is active or not), the status will show as expired.

Right now the only way to get the status to update would be to delete the expired certificate.

I hope this helps! I'll also update the thread when the bug is resolved.

-

If the information provided was helpful to you, please remember to "mark as answer" so that others in the community with similar questions can more easily find a solution.

HA 26 Reputation points

2022-07-12T18:44:38.52+00:00

Hi MarileeTurscak,

Thank you for your reply and yes i deleted the expired certificate and this has resolved the status issue which is now showing 'Active'

I appreciate your help in this regard

Kind Regards,

HA
Dave Boyko 0 Reputation points

2024-01-05T17:48:27.8633333+00:00

Hello - this still seems to be an issue, would it be possible to get the Bug ID so I could check for any comments or more recent workarounds?

Thank you,

Dave

Share via

SAML Signing Certificate - Azure AD

0 additional answers

Your answer