Overview

The Infor OS Portal uses a federated authentication system called the Security Token Service (STS). You can configure single sign-on (SSO) by integrating your identity provider (IDP) with STS, enabling users to sign in to Infor OS Portal using organizational credentials.

To ensure secure SAML-based communication, STS uses signing certificates to verify message integrity. When a new tenant is provisioned in Infor OS, a tenant-specific signing certificate is automatically generated with a default validity period of three years. When the certificate expires, an automated certificate rotation process generates a replacement. See Knowledge Base article 3526568 for information on certification rotation.

Identity provider integrations also rely on signing certificates to secure SAML communications. To help administrators manage certificate lifecycles, the Infor OS Health Service sends notifications before Infor STS and IDP certificates expire. These notifications indicate upcoming expiration dates and help you take any required action before a certificate expires.

To view notifications, open Infor OS Portal, select Notifications, and then click the Application event tab.

Use this guide together with the Infor OS Health Service documentation.