Certificate updates can be accomplished by using the Identity Provider URL, or scheduling the certificate change with the Indeavor Service Center.
Identity Provider Metadata URL
Prerequisite: Customer must publish their metadata to a public url
The Identity Provider Metadata URL field, is used to facilitate changes to your metadata, hourly (at the top of each hour) the url is accessed and any changes between the Identity Provider Metadata field and the data available at Identity Provider Metadata URL field will trigger an update to the Identity Provider Metadata field. Example: If a new certificate is installed, the change will be recognized and applied without any explicit changes being made by an Admin in Indeavor.
Indeavor Pro Tip: Apply certificate and metadata changes just prior to the top of an hour (example: apply changes at 7:55, and at 8:00 Indeavor will identify the change) and SSO down time will be minimized.
Schedule the Certificate Change with the Indeavor Service Center
1. Open a ticket to the Indeavor Service Center, firstname.lastname@example.org
2. In the ticket please include: new metadata, date and time of change
3. An Indeavor Service Center Support Analyst will be assigned to the change and will install at the scheduled date and time.
4. After your IdP has the new certificate installed and the Indeavor Support Analyst has installed the new corresponding metadata in Indeavor you will be able to validate SSO is working with the new certificate, while the Support Analyst stands by in case of any issues.
Indeavor Pro Tip: Indeavor requires the full metadata file, not just the certificate, this greatly reduces the risk of issues during changes.