When you choose to use SSO (Single Sign-On) to access Smash, you must configure a SAML application on your Azure identity provider. A SAML certificate is automatically generated and must also be entered in Smash’s administration interface.
These certificates have a limited validity period. Once expired, SSO login to Smash will no longer be possible. It is therefore necessary to renew the certificate with your identity provider, then update it in Smash’s administration console.
Step 1: Checking the certificate expiration
Log in to the Azure portal: https://portal.azure.com
Go to Azure Active Directory → Enterprise Applications.
Select the “Smash” application.
Open « Single Sign-On ».
Check the expiration date of the active SAML certificate. An alert message should appear if the SAML certificate has expired.
Step 2: Generating a new certificate
Click « Edit ».
Click « New Certificate ».
Choose the validity period (usually 3 years) and save.
Download the certificate in Base64 (.cer) format.
Open the certificate in a text editor and copy its content.
Step 3: Update the certificate in the application
Log in to your Smash administration console.
Go to Administration → Single Sign-On (SSO) → SAML Settings (Smash).
Paste the new certificate in place of the old one, then click Save.
Note: Until the new certificate is activated in Azure, users will no longer be able to access SSO login on Smash. It is recommended to plan the renewal at a convenient time to minimize downtime.
Step 4: Activating the new certificate in Azure
Return to the application’s Single Sign-On section.
Activate the new certificate.
Once validated, deactivate the old certificate.
Step 5: Testing the SSO connection
Click « Test single sign-on with Smash ».
Verify that authentication works without errors.
Best practices
Renew the certificate 30 days before expiration.
Perform the renewal during a period that minimizes service disruption.