Replacing an SSO certificate

For GiveCampus accounts and administrator access.

Authorized institution administrators can use Authentication Settings. For an existing legacy SAML connection owned by this school, replace Certificate in PEM format with the new valid X509 certificate and save. For WorkOS-managed SSO, use Configure SSO in WorkOS and manage certificates there. A shared/inherited identity provider may be managed by another institution; involve its owner or support when editing is unavailable. Coordinate certificate rollover and test login with the identity-provider administrator.