How to Identify Users of Expiring Certificates

Publish Date: Oct 21, 2025

Task

You want to find out which users or processes are using a Salesforce certificate that is about to expire.

Steps

Go to Setup (gear icon → Setup).
In Quick Find, type 'Certificate and Key Management' and open it.
Scan the list and find the certificate that’s about to expire. Note its Name.
Click the expiring certificate’s Name to open its detail page.
Check following places one by one for references to the certificate name you noted: Single Sign-On Settings, Connected Apps, Identity Provider, Named Credentials and also search metadata/code.
For every component that references the expiring cert, investigate usage to determine the specific users or processes impacted by the expiring certificate.

Knowledge Article Number

005226926

Did this article solve your issue?

Let us know so we can improve!