Renew SAML Certificate for SSO Integration

This guide will teach you ho to renew SAML Certificate for SSO Integration. When a SAML certificate for your SSO integration expires, it can disrupt user access to NinjaOne via SSO. To restore functionality, you’ll need to remove the expired configuration and set up a new one. The following guide outlines the process, with Azure used as an example for context.

Steps to Renew/Update the SAML Certificate

1. Log in to Azure

  • Access your Azure portal and navigate to the Enterprise Applications section from the dashboard.

Enterprise Applications

2. Locate the NinjaOne Enterprise Application

  • In the list of enterprise applications, find and select the entry for NinjaOne.

3. Access Properties

  • In the left navigation pane, expand the Manage section and click Properties.

Expand the Manage section and click Properties.

4. Delete the Enterprise Application

  • At the top of the Properties page, click the Delete button.
  • Confirm the deletion by clicking Yes in the confirmation dialog.

Delete the Enterprise Application 

5. Verify Deletion

  • After deletion, you will be returned to the list of enterprise applications.
  • Look for a notification in the top-right corner of the Azure portal confirming that the enterprise application was successfully deleted.

6. Recreate the Enterprise Application

Reconfigure Login Security (SAML/SSO) to create and set up a new enterprise application.

FAQ

A SAML certificate is a cryptographic file used in the Security Assertion Markup Language (SAML) protocol to enable secure communication and authentication between entities, typically an Identity Provider (IdP) and a Service Provider (SP). The certificate plays a critical role in ensuring the authenticity, integrity, and confidentiality of the messages exchanged during the SAML authentication process.

To generate a SAML signing certificate, you’ll typically need to use a specific tool or platform provided by your identity provider or service provider. This often involves navigating to the relevant settings, creating a new certificate, specifying necessary details like expiration date and signing options, and then downloading the certificate in the required format. Once you have the certificate, you can upload it to your service provider to enable SAML-based single sign-on.

To check the expiration date of a SAML certificate in NinjaOne, log in to the NinjaOne Admin Portal using your administrator credentials. Once logged in, navigate to the Administration section from the main menu, then select Accounts, and go to the Identity Provider section. Here, you will find details about the configured SAML certificate, including its expiration date.

To update your SAML certificate for NinjaOne when your existing certificate expires, you’ll need to remove the expired SSO configuration and set up a new one.

Next Steps

Enable SSO
×

See NinjaOne in action!

By submitting this form, I accept NinjaOne's privacy policy.