Duplicate of BUG-000160743: It is recommended to update SAML certificates a month or earlier, before the current one expires. During the time when both SAML certificates are valid, and immediately after the previous one expires, it is recommended that an administrator manages the certificate rollover process to prevent users from being locked out of the system.