Renewing an Expiring SSO Certificate

Your Entra ID SAML signing certificate has an expiration date.

When it expires, SSO login to Cloud2 Spotter will stop working. To prevent this, you need to create a new certificate and activate it before the old one expires.

It is recommended to start the renewal process 1-2 weeks before the certificate expiration date.

Create a new certificate in Entra ID

Find and open your Cloud2 Spotter SSO application from Azure Portal.

Generate new SAML Signing Certificate and check that its' status is Inactive.

Note: Do not activate the new certificate yet.

Activating the new certificate

• Before activating the new certificate, copy and save the previous URL for yourself temporarily. You need it for comparison after you activate the new certificate to check if the URL changes.

• Once saved the URL, activate the new certificate. Compare the URL to the previous.

Note: If the URL changes, send the new URL as soon as possible to Spotter team (via email spotter@cloud2.fi or via Spotter → Support) so we can update the SSO user pool. Your login will not work until the new URL is configured if it changes.

• If the URL does not change, open a new window and try logging in to Spotter. If there are any issues, contact Spotter team as soon as possible.