Genesys Cloud - Main

The public Genesys SSO certificate is due to expire in January 2026. Will we need to perform any actions to renew this prior to the expiration date? Will this have an impact to active SSO integrations?

Hello James, 

I am going to break up your questions and answer them below:

1. Yes you will need to renew the certificate before January 2026. Heres how you can do it:
   1. When the cert renewal becomes available they will be published to the Genesys Github repository. 
   2. You will need to download the cert file that corresponds to your org's AWS region. 
2. Will this have an impact on active SSO integrations, it shouldn't. 
   • This cert renewal primarily affects orgs using the Single Logout feature where the idp supports signature verification for SLO requests. 
   • From my experience, If you are using and IDP that only allows one cert, the SLO feature may stop working until the updated cert is uploaded. That was the only thing effected. 

Hope this helps!

The public Genesys SSO certificate is due to expire in January 2026. Will we need to perform any actions to renew this prior to the expiration date? Will this have an impact to active SSO integrations?

Hi Cameron,

Thanks for the response.

When the new cert is released is this automatically updated on the Genesys side? Do we just need to install the new cert on the SSO side?

Regards,

James

Hello James, 

I am going to break up your questions and answer them below:

1. Yes you will need to renew the certificate before January 2026. Heres how you can do it:
   1. When the cert renewal becomes available they will be published to the Genesys Github repository. 
   2. You will need to download the cert file that corresponds to your org's AWS region. 
2. Will this have an impact on active SSO integrations, it shouldn't. 
   • This cert renewal primarily affects orgs using the Single Logout feature where the idp supports signature verification for SLO requests. 
   • From my experience, If you are using and IDP that only allows one cert, the SLO feature may stop working until the updated cert is uploaded. That was the only thing effected. 

Hope this helps!

The public Genesys SSO certificate is due to expire in January 2026. Will we need to perform any actions to renew this prior to the expiration date? Will this have an impact to active SSO integrations?

Is there an ETA for when the new cert will be available?

Hi Cameron,

Thanks for the response.

When the new cert is released is this automatically updated on the Genesys side? Do we just need to install the new cert on the SSO side?

Regards,

James

Hello James, 

I am going to break up your questions and answer them below:

1. Yes you will need to renew the certificate before January 2026. Heres how you can do it:
   1. When the cert renewal becomes available they will be published to the Genesys Github repository. 
   2. You will need to download the cert file that corresponds to your org's AWS region. 
2. Will this have an impact on active SSO integrations, it shouldn't. 
   • This cert renewal primarily affects orgs using the Single Logout feature where the idp supports signature verification for SLO requests. 
   • From my experience, If you are using and IDP that only allows one cert, the SLO feature may stop working until the updated cert is uploaded. That was the only thing effected. 

Hope this helps!

The public Genesys SSO certificate is due to expire in January 2026. Will we need to perform any actions to renew this prior to the expiration date? Will this have an impact to active SSO integrations?

Hello Judy, 

You should be notified by email and we also release a notice on our resource center when they are available. But generally the certs expire January of the new year so it should be around Oct/Nov time. 

Cheers, 

Is there an ETA for when the new cert will be available?

Hi Cameron,

Thanks for the response.

When the new cert is released is this automatically updated on the Genesys side? Do we just need to install the new cert on the SSO side?

Regards,

James

Hello James, 

I am going to break up your questions and answer them below:

1. Yes you will need to renew the certificate before January 2026. Heres how you can do it:
   1. When the cert renewal becomes available they will be published to the Genesys Github repository. 
   2. You will need to download the cert file that corresponds to your org's AWS region. 
2. Will this have an impact on active SSO integrations, it shouldn't. 
   • This cert renewal primarily affects orgs using the Single Logout feature where the idp supports signature verification for SLO requests. 
   • From my experience, If you are using and IDP that only allows one cert, the SLO feature may stop working until the updated cert is uploaded. That was the only thing effected. 

Hope this helps!

The public Genesys SSO certificate is due to expire in January 2026. Will we need to perform any actions to renew this prior to the expiration date? Will this have an impact to active SSO integrations?

Hi Cameron - So if our org does not have the "Sign Authentication Requests" box checked, than we don't need to worry about this cert? Checked with the team on the SSO side and they don't have any certs from Genesys now, so assume I can ignore this. 

Hello Judy, 

You should be notified by email and we also release a notice on our resource center when they are available. But generally the certs expire January of the new year so it should be around Oct/Nov time. 

Cheers, 

Is there an ETA for when the new cert will be available?

Hi Cameron,

Thanks for the response.

When the new cert is released is this automatically updated on the Genesys side? Do we just need to install the new cert on the SSO side?

Regards,

James

Hello James, 

I am going to break up your questions and answer them below:

1. Yes you will need to renew the certificate before January 2026. Heres how you can do it:
   1. When the cert renewal becomes available they will be published to the Genesys Github repository. 
   2. You will need to download the cert file that corresponds to your org's AWS region. 
2. Will this have an impact on active SSO integrations, it shouldn't. 
   • This cert renewal primarily affects orgs using the Single Logout feature where the idp supports signature verification for SLO requests. 
   • From my experience, If you are using and IDP that only allows one cert, the SLO feature may stop working until the updated cert is uploaded. That was the only thing effected. 

Hope this helps!

The public Genesys SSO certificate is due to expire in January 2026. Will we need to perform any actions to renew this prior to the expiration date? Will this have an impact to active SSO integrations?

Hi Dan, 

You are correct if the "Sign Authentication Requests" box is unchecked in your SSO config and your SSO team confirmed they don't have any Genesys certs, you don't need to worry about the cert and can ignore this. 

Cheers, 

Hi Cameron - So if our org does not have the "Sign Authentication Requests" box checked, than we don't need to worry about this cert? Checked with the team on the SSO side and they don't have any certs from Genesys now, so assume I can ignore this. 

Hello Judy, 

You should be notified by email and we also release a notice on our resource center when they are available. But generally the certs expire January of the new year so it should be around Oct/Nov time. 

Cheers, 

Is there an ETA for when the new cert will be available?

Hi Cameron,

Thanks for the response.

When the new cert is released is this automatically updated on the Genesys side? Do we just need to install the new cert on the SSO side?

Regards,

James

Hello James, 

I am going to break up your questions and answer them below:

1. Yes you will need to renew the certificate before January 2026. Heres how you can do it:
   1. When the cert renewal becomes available they will be published to the Genesys Github repository. 
   2. You will need to download the cert file that corresponds to your org's AWS region. 
2. Will this have an impact on active SSO integrations, it shouldn't. 
   • This cert renewal primarily affects orgs using the Single Logout feature where the idp supports signature verification for SLO requests. 
   • From my experience, If you are using and IDP that only allows one cert, the SLO feature may stop working until the updated cert is uploaded. That was the only thing effected. 

Hope this helps!

The public Genesys SSO certificate is due to expire in January 2026. Will we need to perform any actions to renew this prior to the expiration date? Will this have an impact to active SSO integrations?

Hi, I understand from your message that if we had set up SSO but our domain administrator didn't need or include the Genesys cert to configure SSO, we don't need to worry about it-is that correct?

------------------------------
Angel Vinuesa Velasco
e

Original Message:
Sent: 10-08-2025 12:50
From: Cameron Tomlin
Subject: Genesys Public SSO Certificates Expiring

Hi Dan, 

You are correct if the "Sign Authentication Requests" box is unchecked in your SSO config and your SSO team confirmed they don't have any Genesys certs, you don't need to worry about the cert and can ignore this. 

Cheers, 

------------------------------
Cameron
Online Community Manager/Moderator

Original Message:
Sent: 10-08-2025 12:35
From: Dan Sellar
Subject: Genesys Public SSO Certificates Expiring

Hi Cameron - So if our org does not have the "Sign Authentication Requests" box checked, than we don't need to worry about this cert? Checked with the team on the SSO side and they don't have any certs from Genesys now, so assume I can ignore this. 

------------------------------
Dan Sellar
Contact Center Manager

Original Message:
Sent: 09-17-2025 12:25
From: Cameron Tomlin
Subject: Genesys Public SSO Certificates Expiring

Hello Judy, 

You should be notified by email and we also release a notice on our resource center when they are available. But generally the certs expire January of the new year so it should be around Oct/Nov time. 

Cheers, 

------------------------------
Cameron
Online Community Manager/Moderator

Original Message:
Sent: 09-17-2025 12:15
From: Judy Kerbel
Subject: Genesys Public SSO Certificates Expiring

Is there an ETA for when the new cert will be available?

------------------------------
Judy Kerbel

Original Message:
Sent: 09-12-2025 05:01
From: James Foster
Subject: Genesys Public SSO Certificates Expiring

Hi Cameron,

Thanks for the response.

When the new cert is released is this automatically updated on the Genesys side? Do we just need to install the new cert on the SSO side?

Regards,

James

------------------------------
James Foster
Technical Consultant

Original Message:
Sent: 09-11-2025 13:47
From: Cameron Tomlin
Subject: Genesys Public SSO Certificates Expiring

Hello James, 

I am going to break up your questions and answer them below:

1. Yes you will need to renew the certificate before January 2026. Heres how you can do it:
   1. When the cert renewal becomes available they will be published to the Genesys Github repository. 
   2. You will need to download the cert file that corresponds to your org's AWS region. 
2. Will this have an impact on active SSO integrations, it shouldn't. 
   • This cert renewal primarily affects orgs using the Single Logout feature where the idp supports signature verification for SLO requests. 
   • From my experience, If you are using and IDP that only allows one cert, the SLO feature may stop working until the updated cert is uploaded. That was the only thing effected. 

Hope this helps!

------------------------------
Cameron
Online Community Manager/Moderator

Original Message:
Sent: 09-11-2025 10:38
From: James Foster
Subject: Genesys Public SSO Certificates Expiring

The public Genesys SSO certificate is due to expire in January 2026. Will we need to perform any actions to renew this prior to the expiration date? Will this have an impact to active SSO integrations?

#API/Integrations
#PlatformAdministration
#Security
#SystemAdministration

------------------------------
James Foster
Technical Consultant
------------------------------

Hi Cameron,

Thanks for the response.

When the new cert is released is this automatically updated on the Genesys side? Do we just need to install the new cert on the SSO side?

Regards,

James

Hello James, 

I am going to break up your questions and answer them below:

1. Yes you will need to renew the certificate before January 2026. Heres how you can do it:
   1. When the cert renewal becomes available they will be published to the Genesys Github repository. 
   2. You will need to download the cert file that corresponds to your org's AWS region. 
2. Will this have an impact on active SSO integrations, it shouldn't. 
   • This cert renewal primarily affects orgs using the Single Logout feature where the idp supports signature verification for SLO requests. 
   • From my experience, If you are using and IDP that only allows one cert, the SLO feature may stop working until the updated cert is uploaded. That was the only thing effected. 

Hope this helps!

The public Genesys SSO certificate is due to expire in January 2026. Will we need to perform any actions to renew this prior to the expiration date? Will this have an impact to active SSO integrations?