You or your tenant security administrator may get an email about Anaplan certificate expiration. Your tenant security administrator should rotate this certificate before the expiry date.

When you rotate your Anaplan certificate, a new certificate automatically downloads. You must:

  • Upload that certificate to your associated identity provider (IdP). 
  • Update your account with your IdP to use your new Anaplan certificate. You may be locked out of Anaplan if you don't.

To rotate your Anaplan certificate:

  1. Navigate to Security > Single Sign-on.
  2. Select your connection.
  3. Select the Metadata tab.
  4. Under Anaplan X509 certificate, select Rotate.
The Metadata tab in Single Sign-on with the Rotate link for Anaplan X509 certificate highlighted.
  1. Select Rotate certificate from the Rotate SSO certificate dialog.
  2. Select Close to close the confirmation dialog.
  3. Whether you encrypt traffic or not, you must log in to your IdP (such as Okta or Azure AD) and update your Anaplan certificate. The screenshot below is the next step in Okta, as one IdP example.
An example screenshot from the Okta ISP where you can upload a certificate.

You must rotate your certificate if you use an IdP service for SAML. See Self Service SAML.