browse
Issue
If you are using SAML to integrate your Umbrella Dashboard logins with Active Directory Federation Services (AD FS), occasionally you may have a requirement to change the certificate being used.
If this certificate has already been changed in ADFS, your Dashboard users are likely to see an error similar to the example below when trying to log into the Dashboard.
Resolution
The certificate information is incorporated in the metadata that is taken from your ADFS environment and uploaded to the Umbrella Dashboard during the SAML setup. Unfortunately there is no way to change just the certificate. You will also be unable to disable SAML because you will not be able to log into the Dashboard. At this stage it is best to contact Umbrella support who can quickly disable the SAML integration for you.
Note:
When SAML is disabled, ALL 'Dashboard users' will receive a password reset email in order to allow them to regain access to the Dashboard. You may wish to inform them this will happen before Support disable the integration.
You will then be able to run through the standard SAML setup steps to export the metadata from ADFS, and import this into the Dashboard once again when setting SAML up again.
The setup guide can be found below: