Upload a Second Signing Certificate for a SAML Connection

Problem statement

A requirement exists to upload a second X509 Signing Certificate for a SAML connection. When the current certificate expires, it is desired to rotate to this ‘backup’ certificate automatically.


  • At the moment, only one X509 signing certificate can be uploaded to a SAML connection.
  • Supporting multiple signing certificates has been planned and is on the Product Roadmap to be included by the end of 2024.