Salesforce: How do I update my SSO Certificate?

If your organization uses an SSO to log into your intranet, your SSO Provider’s certificate will need to be periodically changed in order to avoid becoming expired. Your SSO provider will let you know when it's time to update. This article provides instructions on how to update the SSO certificate in Salesforce. 

You MUST be the Simpplr System admin to complete these steps.

This article will also cover how to ensure you have an alternative way to log in in case the certification update fails.

Updating your SSO certificate

1. Ensure that your IT team has activated the certificate.

2. Get to Salesforce by removing everything after .com in your Simpplr url and hitting the Enter key.
   
   1. Alternatively, you can log into Salesforce by visiting https://login.salesforce.com.

3. From the Salesforce home page, head to the Setup (gear in Lightning) icon in the top right.

4. In the Quick Find box, search single sign-on and select the result.
   

5. Click Edit next to the SSO you'd like to update.

6. Click Choose File next to Identity Provider Certificate and select the new certificate from your computer. Note, the old certificate will not be accessible once it's replaced.

7. Click Save.

*Optional* Ensure you have an alternative way to log in in case the certification update fails.

This step only applies if you modified the “Prevent login from https://login.salesforce.com” option in your My Domain settings of salesforce. This is typically unchecked by default.

If you have this setting turned on, we recommend that you temporarily disable it until you can confirm that the new certificate is functioning properly. This step is optional but highly recommended as Simpplr does not have the ability to log into your instance if the update fails.

Disable the “Prevent login from https://login.salesforce.com” setting

1. Log in to Salesforce as a System admin.

2. From the Salesforce home page, head to the Setup (gear in Lightning) icon in the top right.

3. In the Quick Find box, search my domain and select the result.

4. Ensure that in the Policies section, Prevent login from https://login.salesforce.com is not checked.