Renewing Application Certificate for Azure AD

Created by Greg Katz, Modified on Mon, 31 Mar, 2025 at 9:33 AM by Greg Katz

1. In the Azure portal , go to the Single sign-on page for DHQ.

2. In the SAML Signing Certificate section, click Create new certificate.

3. Choose a duration of up to 3 years, then click Save, then click OK.

4. Select Make new certificate active and click Save at the top. This will roll over your existing certificate to the newly created certificate.

5. Download the new certificate and upload it to DHQ.

Rolling the certificate in Microsoft Entra ID and configuring it in your app may cause single

sign-on downtime. Please plan for potential downtime when performing the steps above.