Azure AD SAML certificate renewal guide for EMS360

Before you begin

• EMS360 automatically detects certificate changes - no downtime required

• Renewal can be done at any time without service interruption

• Best practice: Renew certificates before they expire (recommended every 1-2 years)

Renewal steps

1. Access Azure AD

   • Log in to Azure Portal

   • Navigate to: Azure Active Directory → Enterprise Applications

2. Locate EMS360 application

   • Search for EMS360 in your applications list.

3. Access SAML settings

   • Select Single sign-on from the left menu.

   • Scroll to the SAML Signing Certificate section.

4. Certificate management

   • Click Edit in the certificate section.

   • Select Create new certificate.

   • Set the new certificate as Active

     Note: Ignore any warnings - EMS360 automatically handles the transition.

5. Clean up (Optional)

   • The old certificate will now show as Inactive.

   • You may safely delete inactive certificates.

Verification

• Changes take effect immediately.

• EMS360 will automatically begin using the new certificate.

• No further action required on your part.