Update Your Marketing Cloud Engagement SSO Certificate

When you use single sign-on (SSO), your identity provider (IdP) authenticates the identity of each user that attempts to log in to Marketing Cloud Engagement. Salesforce provides a digital certificate that ensures the security and integrity of communications to and from your IdP. These certificates expire after a specific amount of time. When your certificate expires, you must update the certificate details with your IdP.

Note Updating the certificate can cause a temporary service disruption for your users. This disruption continues until your IdP updates the SAML metadata. Plan this operation carefully and make changes during off-peak hours. This opt-in action establishes trust between the two systems.

1. From Setup, in the Quick Find box, enter security settings, and then click Security Settings.
2. Click Edit.
3. In the Single Sign-on Settings section, select the most recent certificate and click Save.
4. On the Security Settings page, click Download Metadata. If your IdP requires you to provide a certificate, click Download to download the certificate in .crt format.
5. Import the metadata into the connection configuration for your IdP.