Why the Browser Certificate Expiration Date Does Not Change After a SAML Certificate Rotation

Published Date: August 21, 2026
Audience: Everyone
Products and Versions Covered:

Jama Connect® - All Versions
- Cloud/CVC
- Self-hosted
SSO using SAML 2.0

Summary

Rotating the Security Assertion Markup Language (SAML) signing certificate used for single sign-on does not update the certificate or expiration date displayed in the browser.

The SAML signing certificate verifies authentication messages exchanged between Jama Connect and an identity provider, such as Microsoft Entra ID. The browser displays a separate TLS/HTTPS certificate that secures the connection to the Jama Connect URL. Amazon issued the browser certificate in this case.

Because these certificates serve different purposes and are managed independently, rotating the SAML signing certificate does not change the browser certificate or its expiration date.

Resolution

Review the browser certificate

Open the Jama Connect® URL and select the lock or security icon in the browser’s address bar.

Review the certificate details to confirm the issuer, validity period, and expiration date.

The expiration date shown in the browser applies only to the TLS/HTTPS certificate. It does not indicate the status of the SAML signing certificate.

Address certificate concerns

If single sign-on works and the browser reports a secure connection, no action is needed.

If single sign-on fails after the certificate rotation, confirm that Jama Connect and the identity provider use the same current SAML certificate.

If the browser reports that the connection is insecure or that the TLS/HTTPS certificate has expired, contact Jama Software Support. Include the Jama Connect URL, the browser error, and the certificate details.

Additional Resources

Feedback:
We welcome your input! Please sign in to leave any comments, suggestions, or ideas for improvement below.

Related to