Skip to main content
日本語 简体中文 繁體中文

Frequently Asked Questions about SAML Signing Certificate Renewal

Target

Customers who have contracted HENNGE Access Control and are using legacy SAML signing certificates to link with other services via SAML.

Precautions

1. The content of this article is based on the product specifications as of August 2024 and may be subject to change without notice.

2. Administrator privileges for HENNGE Access Control are required to verify the actual screen or change settings.

3. Please refer to the following article for instructions on how to access the management screen.
Accessing HENNGE Access Control admin console (Modern View)

4. Once the update work has been performed, it cannot be undone.

Content

※This page is updated as needed.

1. Is it mandatory to update the legacy SAML signing certificate?+

Yes, it is mandatory.
As we plan to discontinue the use of legacy SAML signing certificates in HENNGE Access Control on the last day of March 2025, we kindly ask you to complete the update by the deadline.

2. Is our HENNGE Access Control included? If so, which settings need to be updated?+

Customers who have contracted HENNGE Access Control and are using legacy SAML signing certificates to link with other services via SAML are included.
In addition, settings in the HENNGE Access Control management screen under Service Provider settings with the type [ SAML SSO ] and the signing key item being [ 2048-bits (legacy) ] or [ 1024-bits (legacy) ] are subject to update.

Reference: SAML signing certificate renewal preparations

3. What exactly should we do to update the SAML signing certificate?+

You need to issue a new SAML signing certificate in HENNGE Access Control and complete the update work in HENNGE Access Control after uploading it to the target service.
Please check the following help center articles for details, including preparation.
Reference: SAML signing certificate renewal preparations
Reference: SAML signing certificate renewal steps

4. Do we need to update the SAML signing certificate for Service Provider settings that are not currently in use?+

No, you do not need to respond for Service Provider settings that are not currently in use.
Please delete the Service Provider settings themselves.

5. Does the update of the SAML signing certificate complete with work only on HENNGE Access Control?+

No, updating the SAML signing certificate requires work on both HENNGE Access Control and the linked service side.
If only one side is updated, SAML linking will fail, so please ensure to complete the work on both HENNGE Access Control and the linked service.

6. Is there a possibility that access to the linked service will be lost due to the update of the SAML signing certificate?+

Basically, there is no such possibility.
However, it is expected that SAML linking will fail until the update is completed on both HENNGE Access Control and the linked service.
Therefore, please complete the update on HENNGE Access Control side as soon as possible after the SAML signing certificate update is completed on the linked service side.
※ This error occurs because the certificate used to sign the SAML response on the HENNGE Access Control side and the certificate used to verify the SAML response on the linked service side are different.

7. How can we confirm that the update of the SAML signing certificate has been completed?+

In HENNGE Access Control, the update is completed when you click [ Confirm ] at the bottom right of the pop-up displayed in step 5 of the following help center article.
Reference: SAML signing certificate renewal steps
For the status of updates on the linked service, please contact the vendor providing the service.

8. What happens if we do not update the legacy SAML signing certificate?+

We plan to discontinue the use of legacy SAML signing certificates in HENNGE Access Control on the last day of March 2025.
If you do not update the legacy SAML signing certificate, SAML linking will fail after the above date, so please ensure to complete the update by the deadline.

9. Can the deadline for updating the legacy SAML signing certificate be extended?+

We are very sorry, but we cannot extend the deadline.
We apologize for the inconvenience, but please complete the update by the last day of March 2025.

10. Can we ask HENNGE to perform the settings for updating the legacy SAML signing certificate?+

We are very sorry, but we cannot perform the settings for you.
This SAML signing certificate update requires not only HENNGE Access Control but also responses to each service you are using.
Therefore, you need to respond to each service, and we cannot perform the settings for you. We appreciate your understanding.