Appneta SSO Certificate Update

Products

• AppNeta
• Network Observability

Issue/Introduction

We appear to be having an SSO outage, and/or our companies SSO certificate was changed or needs to be updated, or the certificate has expired and should be updated.

Resolution

Please check the validity of your existing SSO certificate.  If the certificate has expired, you will need to obtain a new certificate from your SSO provider as a first step.  While arranging the renewal, please open a support ticket with Broadcom, and request to update your certificate.

For SSO, AppNeta uses the Identity Provider PingOne and OKTA , and SSO certificates are provided by customers usually with metadata, through a certificate alone can also be provided for certificate update issues. 

When expiring, a new cert is provided by the customer and the Broadcom Support team will request the certificate is uploaded in the support ticket to update the the Identity Provider (IdP).

We recommended performing the change certificate change during a scheduled call.  The support team will make the change with the IdP, using the updated certificate provided.   When completed, the customer can perform testing to confirm the the service continues to work as expected.  We recommend testing using an incognito browser window.

Additional details for SSO can be found here:
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/appneta/GA/appneta-overview/system-administration/single-sign-on.html 

In rare cases, Support may request the complete metadata from your SSO deployment, though this is usually only required during initial setup.