Parcelwise: nobody at Zwolle can sign in, SAML certificate expired
Description
URGENT. Nobody at hub Zwolle can sign in since 06:00. Error after the Microsoft login: "The response signature is invalid". Morning shift is waiting at the gates.
Linked issues
- relates to SUP-852 Parcelwise: a new Entra ID signing certificate on Wednesday Done
- relates to SUP-897 Parcelwise: new SAML certificate for the Eindhoven hub Done
Comments (8)
Their signing cert on the Zwolle app rolled over in Entra ID last night (old one expired 24 Nov). We still have the old one. Need their new metadata or the new cert.
Ruud, the certificate on Zwolle's application in Entra ID was renewed overnight and we still trust the old one. Can someone with access to Entra ID send us the app's new federation metadata (Enterprise applications → the Zwolle app → Single sign-on → Federation Metadata XML)?
Sent by mail to Ines just now. Sorry, the renewal reminder went to someone who left.
New cert loaded for depot ZWO. Test sign-in OK.
Zwolle signs in again. Ruud, can you confirm from the hub?
Confirmed, people are in.
Closing. For the other hubs: each app's certificate has its own expiry date in Entra ID. Send us the new metadata a week before a renewal and agree a time with us, and we swap the certificate at the same moment you make the new one active.
Looking now.