DRAFT KB-XXXX How to update the Service Provider signing certificate in the Administration console

The following steps will need to be performed in the Appian Administration console when updating the Service Provider signing certificate.

We highly recommend attempting the following steps on a non-PROD environment before attempting the update on PROD if possible.

1. Obtain a new signing certificate in a .pem format that contains both the certificate and a private key. See KB-1108  for steps on how to generate a self-signed certificate in the required format.
2. Log into Appian as the system administrator and navigate to Administration Console > Authentication > SAML.
3. Delete the existing Service Provider Signing Certificate and upload the one from Step 1.
4. Enter the certificate password if necessary.
5. Download the new Service Provider metadata from the Administration console. Use the downloaded metadata to update the connection settings in your IDP.
6. Test the settings by clicking Test, and a new window/tab will be redirected to the IDP login page. Enter the credentials for same user in Appian. 
7. When the authentication is successful, close the test window and click on Test Completed.
8. Click Save Changes to complete the update

Affected Versions

This article applies to all versions of Appian.