Mandatory Action – SSO Certificate Renewal (Required by Jan 1, 2027)

Starting January 1, 2027, Symbol Security will enforce strict single sign-on (SSO) validation and block sign-in attempts using expired identity provider certificates.

To prevent login disruptions for your users, account administrators must renew their SSO certificates in their Identity Provider (IdP) console and re-upload the updated metadata to Symbol Security prior to January 1, 2027.

Below are the step-by-step instructions based on your primary Identity Provider (Microsoft Entra ID, Google Workspace, or Okta).

Method 1: Microsoft Entra ID (formerly Azure AD)

Step 1: Locate the Symbol SSO Application

1. Open a new browser tab and sign in to the Microsoft Entra Admin Center using your administrator account.

2. Navigate to Identity > Applications > Enterprise applications.

3. Search for and select Symbol Security SSO.

   

Step 2: Renew the SAML Certificate

1. In the left navigation menu, click Single sign-on.

2. Scroll to the SAML Certificates section and click Edit.

3. Click + New Certificate (by default, the new certificate is set to expire in 3 years).

4. Click Save at the top of the pane.

5. Set the new certificate status to Active, and delete or deactivate the expired certificate.

   

Step 3: Re-activate Symbol SSO

1. In the SAML Certificates section, locate the active certificate and click Download next to Federation Metadata XML.
2. Log in to the Symbol Security App in another window.
3. Go to Company Settings and remove the existing SSO integration.
4. Upload the downloaded .xml file into the Service Provider Metadata field.
5. Click Activate SSO to finalize the configuration.

Method 2: Google Workspace (Google Admin Console)

Step 1: Locate the Symbol SSO Custom SAML App

1. Sign in to the Google Admin Console using your Super Admin credentials.
2. Go to Apps > Web and mobile apps.
3. Locate and click on your Symbol Security custom SAML application.

Step 2: Renew/Replace the Service Provider Certificate

1. Expand the Service provider details section.
2. Under Certificate, check if a secondary certificate can be generated or updated, or navigate to Security > Authentication > SSO with SAML apps to manage IdP certificates.
3. Select or generate an active X.509 certificate.
4. Click Download Metadata to obtain the updated GoogleIDPMetadata.xml file.

Step 3: Re-activate Symbol SSO

1. Log in to the Symbol Security App.
2. Go to Company Settings and remove the existing integration.
3. Upload the newly downloaded Google IdP .xml metadata file into the Service Provider Metadata field.
4. Click Activate SSO to verify and complete activation.

Method 3: Okta

Step 1: Locate the Symbol SSO Application

1. Sign in to your Okta Admin Console.
2. In the navigation panel, go to Applications > Applications.
3. Click on the Symbol Security SAML application.

Step 2: Generate a New SAML Certificate

1. Select the Sign On tab.
2. Scroll down to the SAML Signing Certificates section.
3. Click Generate new certificate.
4. Once generated, click the Actions dropdown next to the new certificate and select Make active.
5. Locate the active certificate entry and click View IdP metadata (or right-click and save the metadata link as an .xml file).

Step 3: Re-activate Symbol SSO

1. Log in to the Symbol Security App.
2. Navigate to Company Settings and clear/remove the current integration setup.
3. Upload the updated Okta metadata .xml file into the Service Provider Metadata field.
4. Click Activate SSO to save and re-enable login functionality.

Need Further Assistance?

If you encounter any issues during the renewal process or have questions regarding multi-tenant setups, please reach out to the Symbol Security Support Team before December 31, 2026.