Help Center
Help Center
Getting Started and Quick Guides
Users
Administrators
🧩Area: Administrators
🎓 Administrator Onboarding
SecuMails
Outlook Add-In (Classic Outlook)
Outlook Add-In (new Outlook)
FTAPI Gateway
Trust Networks
SecuRooms
SecuRooms Drive
SecuForms
Server Settings
General Server Settings
📋 User Account Cleanup: Automatically deactivate or delete inactive accounts📋 User Management: Creating user accounts manually, automatically, or via AD📋 User management: Assigning and changing group memberships📋 User Management: Setting a password for "unregistered" usersEmail delivery: Sender of delivery notifications📋 Email delivery: Emails are not arriving or are landing in spam (DNS configuration)📋 G.Data Virus Scanner: Configuring MIME types for allowed file types📋 Group Management: Configuring Permissions, Licenses, and Priority Rules📋 LDAP: Exporting LDAPS certificate via MMC or OpenSSL📋 Limits: Configuring size and download limits per group and product❓MySQL: Upgrade from 8.0 to 8.4📋 OpenSSL: Converting certificate formats (.cer, .crt, .pem) to .pfx📋 SecuPass: Activate and set up end-to-end encryption (E2E)📋 SecuPass: Resetting end-to-end encryption📋 Security: Restrict available security levels per group📋 SSO: Renewing SAML credentials for a Relying Party (RP)📋 SSO: Setting up SAML Single Sign-On with ADFS📋 SSO: Exporting and updating the SAML certificate (metadata) from IdP📋 SSO: Adjusting token lifetime on ADFS server via PowerShell and console📋 System: Setting up a custom SMTP relay for deliveries and notifications📋 System: Configuring Login Disclaimer (Terms of Use) for Users📋 Windows: Create a .p12 / .pfx certificate from a .p7b file
Templates
Miscellaneous
Download Center
Changelog

📋 SSO: Renewing SAML credentials for a Relying Party (RP)

This article shows you how to renew the SAML Relying Party certificate for SSO authentication in the FTAPI WebUI and how to configure automatic notifications for upcoming expirations. This ensures that login remains uninterrupted for your users.

SAML certificate expiration warning and metadata change

If the Relying Party certificate is set to expire in less than 35 days, all members of the "Administrator" group (or groups with the "System Administration" permission enabled) will receive an email notification every Monday at 8:00 AM.

The notification includes the certificate's expiration date and the number of days remaining until expiration.

If the Relying Party certificate expires, SSO via SAML will no longer function. Renew the certificate before it expires to ensure uninterrupted SAML authentication.

Steps to renew the certificate

  • Log in to the WebUI with your admin account.
  • Navigate to the admin configuration at <YOUR_SERVER>/webui/admin/listConfig.html
  • Select the menu Single Sign-On SAML 2.0.

The following interface will appear:

Set the validity period of the Relying Party certificate to the desired value:

  • 1 (default), 2, or 3 years.

Set the key size of the Relying Party certificate:

  • 4096 Bit (default) or 2048 Bit (for legacy systems).

Click the Renew RP credentials button. The system will generate the new certificate, which may take a few seconds. Once completed, the Relying Party certificate validity interval will display the new validity period.

Click Save.

If necessary, click the Download RP certificate button to download the certificate.

Related articles

📋Changing metadata at the Identity Provider for SSO via SAML
📋Creating user accounts manually, automatically, or via AD
📋Adjusting token lifetime on the ADFS server via PowerShell and console


Was this article helpful?

English
Powered by Product Fruits