Parcelwise: our 32 hubs' Entra ID certificates expire, please swap them like last year
Description
Hi support,
your expiry warning says the signing certificates of our ACME apps in Entra ID expire on 2 September. Last year you swapped them on your side when we sent the new ones. New certificates attached. Can you do the same this year?
Femke de Boer IT manager, Parcelwise
Linked issues
- relates to ENG-1522 SAML metadata upload Done
- relates to SUP-1223 Vossberg: Okta sign-in refused at every depot after certificate rotation Done
Comments (8)
Tried it for Eindhoven: 'Entity ID does not match this hub's connection'. File attached.
Thanks. That file is from your app "ACME SSO TEST", not the Eindhoven app. The test app has a different entity ID, which is why the portal refused it. Download the metadata from the Eindhoven app and it should go through.
That worked for Eindhoven. Do I really need to do this 32 times, once per hub?
Yes, for now. Each hub is its own app in Entra ID with its own certificate, and each hub holds its own setup in ACME, so the upload and the test are per hub. About a minute each. I've passed on that one setup for all your hubs would save you this.
Customer feedback for Lena: per-depot SAML setup turns a certificate rotation into 32 uploads and 32 test sign-ins for Parcelwise. One setup per client would make it one.
All 32 uploaded and tested before the old ones expire.
Great, thanks Femke. Closing.
Hi Femke, from today you can do this yourselves: SAML metadata upload went into the portal this morning, and the expiry warning links straight to it.