---
schema_version: "1"
id: 2f69abf4ea44b73373d31c20c4ac25435657db251201ada30071a3c37eb5baf2
title: Update Your Marketing Cloud Engagement SSO Certificate
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_overview_update_sso_cert.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_overview_update_sso_cert.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: b8bc2ea8aa0bf9b4bb648c92100ca66382367a47e43f9df8bcc314cb5c275f21
description: When you use single sign-on (SSO), your identity provider (IdP) authenticates the identity of each user that attempts to log in to Marketing Cloud Engagement. Salesforce provides a digital certificate that ensures the security and integrity of communications to and from your IdP. These certificates expire after a specific amount of time. When your certificate expires, you must update the certificate details with your IdP.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Update Your Marketing Cloud Engagement SSO Certificate

When you use single sign-on (SSO), your identity provider (IdP) authenticates the identity of each user that attempts to log in to Marketing Cloud Engagement. Salesforce provides a digital certificate that ensures the security and integrity of communications to and from your IdP. These certificates expire after a specific amount of time. When your certificate expires, you must update the certificate details with your IdP.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_marketing_cloud_overview-264-0-0-production-enus/2555afdb-8049-4e3c-8043-0e04803e5f16/images/icon_note.png)

Note Updating the certificate can cause a temporary service disruption for your users. This disruption continues until your IdP updates the SAML metadata. Plan this operation carefully and make changes during off-peak hours. This opt-in action establishes trust between the two systems.

1. From Setup, in the Quick Find box, enter security settings, and then click **Security Settings**.
2. Click **Edit**.
3. In the Single Sign-on Settings section, select the most recent certificate and click **Save**.
4. On the Security Settings page, click **Download Metadata**. If your IdP requires you to provide a certificate, click **Download** to download the certificate in .crt format.
5. Import the metadata into the connection configuration for your IdP.