ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.

Engineering / ENG-1348

Depot SAML config shows the certificate's subject and fingerprint, and warns on a reused one

Project: Engineering
Type: Story
Status: Done Done
Priority: Medium
Organization: Brakeline
Reporter: Marek Nowak <marek.nowak@acme-hq.example>
Assignee: Piet de Vries <piet.devries@acme-hq.example>
Labels: brakelinesingle-sign-on
Components: identity-service
Fix versions: identity-service 2026.03.26
Sprint: Sprint 38
Story points: 3
Created: 12 Mar 2026, 10:20 UTC
Updated: 26 Mar 2026, 14:20 UTC
Resolved: 26 Mar 2026, 14:20 UTC

Description

Hull's rehearsal failed because Grimsby's certificate was loaded into Hull's config. Nothing on screen would have told us.

Acceptance criteria

Loading metadata into a depot shows the IdP certificate's subject, fingerprint and expiry before saving.
If the same certificate is already on another depot of the client, a warning names that depot.
The warning doesn't block: some customers do share one certificate across apps.

Linked issues

relates to ENG-1288 Brakeline: depot SAML configs for 9 depots, a rehearsal sign-in from each Done
relates to SUP-671 Brakeline: Hull rehearsal fails, 'signature is invalid' Done
relates to SUP-388 Brakeline rollout of single sign-on Done

Comments (0)

No comments.