Skip to main content
日本語 简体中文 繁體中文

[Access Control] Frequently Asked Questions About Updating SAML Signing Certificates

Target

  • Customers who have contracted Access Control and are using legacy SAML signing certificates to integrate with other services

Notes

  1. This article is based on the product specifications as of March 2024 and may change without notice thereafter.
  2. Administrator privileges for Access Control are required to verify actual screens and change settings.
  3. Please refer to the following article for how to access the Administration screen.
    How to access the Access Control Administration screen
  4. Once the update work has been carried out, it cannot be undone.

Details

※ This page will be updated as needed.

1. Is it mandatory to update the legacy SAML signing certificate?+

Yes, it is a mandatory action.
The use of legacy SAML signing certificates in Access Control is scheduled to be discontinued at the end of March 2025, so we kindly ask you to take action by the deadline.

2. Is our Access Control a target? If so, which settings need to be updated?+

Customers who have contracted Access Control and are using legacy SAML signing certificates to integrate with other services are the target.
Additionally, within the Connected Services in the Access Control Administration screen, settings with the type [SAML SSO] and a signing key of [2048-bits (legacy)] or [1024-bits (legacy)] are subject to updates.

Reference: Preparation for updating SAML signing certificates

3. What exactly should be done to update the SAML signing certificate?+

In Access Control, a new SAML signing certificate must be issued, and after it has been uploaded to the target service, the update work in Access Control must be completed.
For details, including preparation, please refer to the following Help Center articles.
Reference: Preparation for updating SAML signing certificates
Reference: Procedure for updating SAML signing certificates

4. Is it necessary to update the SAML signing certificate for Connected Services settings that are not currently in use?+

No, it is not necessary to take action for Connected Services settings that are not currently in use.
We apologize for the inconvenience, but please delete the Connected Services settings themselves.

5. Is the update of the SAML signing certificate completed only on Access Control?+

No, the update of the SAML signing certificate is required not only on the Access Control side but also on the side of the integrated service.
If only one side is updated, SAML integration will fail, so please ensure that work is done on both Access Control and the integrated service.

6. Is there a possibility that access to the integrated service will be lost due to the update of the SAML signing certificate?+

Basically, there is not.
However, until the updates on both Access Control and the integrated service are completed, it is expected that SAML integration will result in an error.
Therefore, once the update of the SAML signing certificate on the integrated service side is completed, please complete the update on the Access Control side as soon as possible.
※ An error will occur because the certificate used for signing the SAML response on the Access Control side and the certificate used for verifying the SAML response on the integrated service side will be different.

7. How can I confirm that the update of the SAML signing certificate is complete?+

In Access Control, the update is completed when you press [OK] at the bottom right of the popup displayed in step 5 of the following Help Center article.
Reference: Procedure for updating SAML signing certificates
Regarding the update status on the integrated service, we apologize for the inconvenience, but please contact the vendor of the service.

8. What happens if the legacy SAML signing certificate is not updated?+

We plan to discontinue the use of legacy SAML signing certificates in Access Control at the end of March 2025.
If the legacy SAML signing certificate is not updated, SAML integration will fail after the above date, so please be sure to take action by the deadline.

9. Can the deadline for updating the legacy SAML signing certificate be extended?+

We apologize, but we are unable to extend the deadline.
We appreciate your understanding and kindly ask you to complete the necessary actions by the end of March 2025.

10. Can HENNGE assist with updating the legacy SAML signing certificate?+

We regret to inform you that we cannot assist with the configuration.
For this update of the SAML signing certificate, it is necessary to address not only Access Control but also each service you are using.
Therefore, you will need to handle each service yourself, and we kindly ask for your understanding that we cannot assist with the configuration.

11. The legacy SAML signing certificate is used in Secure Transfer. What actions should be taken?+

No action is required for Secure Transfer.
The replacement of the legacy SAML signing certificate in Secure Transfer is expected to be completed solely by our team, so no action is required on your part.