Is there any impact on SSO?

[Rob bakshi]

Do we need some information about deploying Expressway Certificates and the impact on SSO?
We reviewed with our IDP team and it is our understanding that the SAML SP certs are not dependent on the exp-e certificates but are dependent on the exp-C certificates.

We are using SAML SSO and UCM/ldap authentication
Should we also renew the EXP-C certificates at the same time and refresh the SSO?

I have not found any documents related to this.

Software version using on exp-c and exp-e  X12.6.4

We are using the same CN and SAN while generating the CSR

[b.winter · Accepted solution]

Hi,

What is your exact question?

What you wanna do and what is your problem?

--- Please rate this post as "Helpful" or accept as a solution, if your question has been answered ---

[Roger Kallberg · Accepted solution]

If you mean that you should renew the cert of the Exp MRA C node(s) at the same time as you do it for your on-prem UC systems that's a no. As long as the cert is valid on the C(s) you don't need to renew anything.

[Rob bakshi · Accepted solution]

Hi Roger, The EXP-E and EXP-C certificate is going to expire soon, we have to generate the CSR and installing the new certs. 

I just want to know, Is there any Impact on the SSO? if we install new certs

[Roger Kallberg · Accepted solution]

If you get a new cert you will need to update the trust in the IdP.

Also why do you mark all reply, including your own, as the answer/solution to your question?

[Rob bakshi · Accepted solution]

Thank you Roger for confirming! 

Do we need to Export any SAML data post certificate upload activity? 

If the private key is going to change, in that case we have to export the SAML data ?

[Roger Kallberg · Accepted solution]

Either export the meta data, that would contain the new certificate information, or simply give the new certificate file to your manager of the IdP for them to update the trust with the new certificate information.

Again please stop marking all replies as the answer to your question. That’s the green check box that appears on the posts. This is not the intended way for how to use this function. Also please go back and change this on the previous wrongly marked posts to only have the one/once that actually answered your question marked as the answer to your question.