Google SSO Certificate Expired
The SSL certificates issued by Google for SSO purposes usually have a 5-year expiration. When these expire, the SSO between Google and Nebraska Cloud will stop working.
To update this, you'll need to have Google admin privileges:
- Go to https://admin.google.com/ac/apps/unified (On the Google admin console, expand the Apps section, then click "Web and mobile apps").
- On that screen you should see an app for Nebraska Cloud. Click on the app to open it.
- In the Service Provider Details section check the expiration date on the certificate. If it's already been updated (expiration is a year or more from now), then use the Download Metadata link on the left of the screen to retrieve the new XML metadata file and send that in to the ESUCC/SSO - Single Sign-On category (help@esucc.org, or reply to an existing ticket).
- If the certificate is expired, expand the Service Provider Details section and use the Certificate drop-down and Manage Certificates button to update/create a new certificate.
- Save the changes if needed (Save button at the bottom).
- Use the Download Metadata link on the left of the screen to retrieve the new XML metadata file and send that in to the ESUCC/SSO - Single Sign-On category (help@esucc.org, or reply to an existing ticket).