SUPPORT CENTER

An expiring single sign-on (SSO) certificate can be updated from the ForeFlight Admin settings. The update process depends on whether the identity provider (IdP) supports certificate rollover.

To update an SSO certificate, complete the following steps:

1. Sign in to ForeFlight Web as an Admin.

2. Navigate to Settings.

3. Scroll to the SSO section and select Update SSO.

4. Select Configure.

5. Update the certificate based on the IdP configuration:

   • If the IdP supports rollover certificates:

     • Enter the new certificate in the Rollover Certificate field.

     • Leave the existing certificate in the Primary Certificate field.

     • ForeFlight attempts authentication using the primary certificate and automatically falls back to the rollover certificate if needed.

   • If the IdP does not support rollover certificates:

     • At the selected cutover date and time, replace all certificate fields with the new certificate.

6. Select Save to apply the changes.

The updated configuration is pushed live after saving. Allow a few minutes for the changes to take effect.