Do we need to manage or renew certificate for app using Openid and OAuth for SSO

Ritesh Sharma 266 Reputation points
2024-01-19T13:44:41.96+00:00

We have enterprise application configured with SSO using SAML and OpenId, OAuth. We have to renew and manage certificate for applications configured SSO through SAML. However, not sure do we need to renew and manage certificate for applications using SSO through Openid and OAuth? I have gone through some articles and check for the same. However, no where mentioned it uses certificate, which need to renew. I am confused about the same. As, under enterprise app it don't show any date for certificate expire for application using Openid and OAuth authentication. However, when i go to app registration under certificate. It does show the certificate and expire date. Do we need to manually renew this or it auto renew?

Azure Cloud Services
Azure Cloud Services
An Azure platform as a service offer that is used to deploy web and cloud applications.
665 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,258 questions
0 comments
Accepted answer
  1. Pinaki Ghatak 2,720 Reputation points Microsoft Employee
    2024-01-19T13:52:28.94+00:00

    Hello @Ritesh Sharma When it comes to SSO using SAML, it’s clear that you need to manage and renew the certificates. This is because SAML relies on certificates for signing and encrypting assertions. For OpenID Connect and OAuth, the situation is a bit different. These protocols don’t inherently require certificates for their operation. However, they often use HTTPS for secure communication, which does require an SSL/TLS certificate.

    This certificate needs to be managed and renewed to ensure the secure operation of your service. In terms of the certificate you see under app registration, it’s likely related to the SSL/TLS certificate for securing the communication. If auto-renewal is enabled, it should renew automatically. However, if auto-renewal is not enabled, you would need to manually renew the certificate. It’s always a good practice to have a process in place to track the expiration and renewal of your certificates to avoid any service disruption.

    If you’re unsure, it might be best to reach out to your service provider or check their documentation for specific details. Remember, the security of your application and the data it handles is paramount, so ensuring your certificates are up to date is crucial.
    I hope this information helps you for your security journey.
    Have a great (and secure 🛅) weekend.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest