KB-1461 How to update SAML configurations for use with a new IDP signing certificate

Purpose

The following steps will need to be performed in the Appian Administration Console once the new IDP signing certificate has been installed on the IDP side.

Instructions

The following steps should be attempted on a non-production environment first, before making the changes on production.

Appian 25.1 and above

1. Obtain the new IdP metadata for the connection once the new IDP certificate has been successfully installed.
2. Log into Appian as the System Administrator and navigate to Administration Console > Single Sign-On > SAML.
3. Delete the existing Identity Provider Metadata file and upload the new file from Step 1.
4. Test the settings by clicking “TEST THIS CONFIGURATION”, and a new window/tab will be redirected to the IDP login page. Enter the credentials for the same user in Appian. 
5. When the authentication is successful, close the test window and click on “TEST COMPLETED”.
6. Click “DONE” to close the SAML configuration dialog box.
7. If the System Administrator performing the above steps is part of the SAML authentication group configured or, there is no SAML authentication group configured, the user will be required to click “VERIFY MY ACCESS” prior to saving changes. For more information on verifying access, please refer to the documentation linked here.
8. Click “SAVE CHANGES” to complete the update.

Appian 24.4 and below

1. Obtain the new IdP metadata for the connection once the new IDP certificate has been successfully installed.
2. Log into Appian as the System Administrator and navigate to Administration Console > Authentication > SAML.
3. Delete the existing Identity Provider Metadata file and upload the new file from Step 1.
4. Test the settings by clicking “TEST THIS CONFIGURATION”, and a new window/tab will be redirected to the IDP login page. Enter the credentials for the same user in Appian. 
5. When the authentication is successful, close the test window and click on “TEST COMPLETED”.
6. Click “DONE” to close the SAML configuration dialog box.
7. If the System Administrator performing the above steps is part of the SAML authentication group configured or, there is no SAML authentication group configured, the user will be required to click “VERIFY MY ACCESS” prior to saving changes. For more information on verifying access, please refer to the documentation linked here.
8. Click “SAVE CHANGES” to complete the update.

Affected Versions

This article applies to Appian 7.11 and later.

Last Reviewed: August 2026