When you use single sign-on (SSO), your identity provider (IdP) authenticates the identity of each user that attempts to log in to Marketing Cloud Engagement. Salesforce provides a digital certificate that ensures the security and integrity of communications to and from your IdP. These certificates expire after a specific amount of time. When your certificate expires, you must update the certificate details with your IdP.
Note Updating the certificate can cause a temporary service disruption for your users. This
disruption continues until your IdP updates the SAML metadata. Plan this operation carefully and
make changes during off-peak hours. This opt-in action establishes trust between the two
systems.
- From Setup, in the Quick Find box, enter security settings, and then click Security Settings.
- Click Edit.
- In the Single Sign-on Settings section, select the most recent certificate and click Save.
- On the Security Settings page, click Download Metadata. If your IdP requires you to provide a certificate, click Download to download the certificate in .crt format.
- Import the metadata into the connection configuration for your IdP.