Skip Navigation
Click here for an update from Oracle on PHP remediation

Search

SSO certificate expiration notification
Answer ID 13176   |   Last Review Date 09/23/2026

Why am I suddenly receiving an SSO certificate expiring notification?  

Environment: 

Oracle B2C Service SSO - starting in version 26A

Resolution:

Beginning in Oracle B2C Service version 26A, there is a new feature where emails are sent to site administrators when a Single Sign-On (SSO) certificate is about to expire.  The email notifications are sent to administrators 3 months prior to the expiration date and will be sent when there are 45, 30, 15, 7, 3, 2, and 1 days for the SSO certificate to expire.  You can see details on this feature in the What's New for 26A.

The SSO certificate expiration notification are sent to staff accounts who have both Admin Settings on their profile as well as the SSO Login (SAML 2.0) permission selected on the profile.  The recipient list cannot be directly edited to change who receives these notifications.  If you have a large number of profiles that have Admin Settings and the SSO Login (SAML 2.0) permission on the profile, you can review your profiles and potentially split the profiles to remove Admin settings from true non-administator type profiles, depending on your business needs.  

If you do not want the SSO certificate expiration notifications to be sent to anyone, please submit a service request to Technical Support and and the notifications can be disabled.  This will disable the expiration notifications for all users.