Rotating the SAML private key and certificate

The SAML private key should be rotated once a year. Rotating the private key involves these steps:

  1. Generating a new WFM SAML signing key and certificate.
  2. Saving the new private key to the Sensitive Data Configuration form.
  3. Adding the new WFM signing certificate to the WFM service provider configuration in Infor Ming.le.

If Infor Ming.le issues a new SAML public signing certificate, the new signing certificate can be saved to the Sensitive Data Configuration form.

Note: Since the SAML private signing key and public signing certificate are used each time a user authenticates, the keys should only be rotated when the system is not in use.

See Infor Workforce Management Configuration Guide for Infor Operating Service – Cloud Edition for details on rotating the SAML private key and updating the Infor Ming.le certificate in Workforce Management.