SP Signing Certificate for SSO (SAML) is Required to be Changed

Thank you for using Questetra.
Questera supports SAML 2.0, thus the Single Sign-On feature is available. When executing SSO, Questetra behaves as an SP (Service Provider).

M310: Enable Login Function using External Authentication Service (SAML)

We are now informing you that the certificate on the SP side will expire on May 13, 2022.

Customers using the Single Sign-On function using SAML are required to renew the certificate at both IdP/SP (Questetra) by May 12th. We apologize for the inconvenience and thank you for your cooperation.

Please note that you can specify the new certificate from Questetra Version 14.0 which will be released on April 10th, 2022, but the timing of updating will differ depending on the workflow platform.

Workflow platform for Rapid Update: April 10th, 2022
Workflow platform for Scheduled Update and Trial mode: May 1st or 9th, 2022
- For Version 14.0, most customers’ workflow infrastructure is subject to planned updates
- The update date will be announced one week in advance of the date that is officially decided

For the workflow platforms subject to a Scheduled Update we will ask you to correspond in a very limited period of time, but please be prepared.

Correspondence on the SP side (Questetra)

Please take the following actions after your workflow platform has been updated to Version 14.0. System Administrator authority is required for this operation.

Go to [System Settings] > [SSO (SAML)] and change the [Verification certificate] in the SP Information section to [bpm 2022 (Expiration Date 2032-04-01)]
- After updating to Version 14.0, you will be able to switch the Verification Certificate of SP information with the select box
Click [Save]

If the current certificate “bpm (Expiration Date 2022-05-13)” is specified, you will not be able to log in using Single Sign-On (SAML) after May 13, 2022 (0:00) [UTC]. Since the Certificate will not switch automatically, so please complete the change by May 12, 2022.

Correspondence on the Idp side

Depending on the IdP (ID Provider) you are using, please take one of the following actions.

In case you have not registered the SP certificate to the IdP (not used, not validated)

No action is required on the IdP side.

In case you can register two SP certificates in IdP, old and new

By registering a new certificate (bpm2022) in addition to the current certificate (bpm), you can proceed with preparations before updating to Version 14.0. After the workflow platform has been updated to Version 14.0, delete the expired certificate after the certificate change is completed on the SP side.

In case you can only register one SP certificate to your IdP

Please renew the SP certificate registered to the IdP to the new one (bpm2022). Make sure to match the correspondence timing with the SP side so that the same certificate is referenced by both IdP and SP.

SP Signing Certificate

New Certificate (bpm2022)

Expiration Date 2023-04-01 (2032-03-31 15:00 UTC)

Current Certificate (bpm)

Expiration Date 2022-05-13 (2022-05-13 00:38 UTC)

SP Signing Certificate for SSO (SAML) is Required to be Changed