Update SAML IDP metadata

[GianniPapetti]

Hello dear ChechMates, in a few days the IDP certificate with which we authenticate SAML VPN Mobile and Remote Access accesses expires.

Trying to update the metadata in the Identity Provider object I get this error and am unable to proceed.

Any ideas?

Best,

Gianni.

[AkosBakos]

Hi @GianniPapetti 

As I remember correctly, but I can't recall it for 100% sure. You need to remove the the object from the "Authenticaton" here. Remove the Identity Provider object.

The "where use" does not show the exact place.

Keep in mind: During this change the authentication won't work

Akos

[GianniPapetti]

Think you are right.

We have both Mobile and Remote access via SAML Auth; will try with Mobile first cause less used.

Thanks a lot,

Gianni.

[AkosBakos]

Hi Gianni,

Please keep us updated. This thread will relevant for others too.

Akos

[GianniPapetti]

Hi there,

just added a new IDP with updated medatata for example 2025_IdP

I have access to the IdP side so it was super easy ti update ACS and EntityID parameters after creation

[Nüüül]

The way @AkosBakos  wrote is what i did some weeks ago, and it worked.

Just remove the idp from the login options settings, renew metadata xml and reassign it.