SAP Knowledge Base Article - Public

2654241 - How to update the SAML Service Provider certificate in SAP Cloud Platform Identity Authentication Service after renewing it in SAP Analytics Cloud


  • You received the message indicating that the Service Provider certificate expires in X days as documented in KBA 2542839
  • You use SAP Cloud Platform Identity Authentication Service (SAP IAS) (formerly SAP Cloud Identity). This is the SAML Identity Provider used by S/4HANA Cloud Edition, Hybris Marketing Cloud and other SAP solutions.


  • SAP Analytics Cloud


When you renew your Service Provider certificate, your browser downloads a metadata.xml file. Keep this file as it contains the new certificate.

  1. Logon to SAP IAS as administrator
  2. Go to the menu Applications & Resources > Applications > Name for your SAP Analytics Cloud tenant
  3. Select the option SAML 2.0 Configuration
  4. In the section Signing Certificate you can update the certificate that is included in metadata.xml


More details on extracting the certificate:

Copy the content between the tags <X509Certificate> and </X509Certificate>


Paste this text in the menu indicated in SAP IAS in between the -----BEGIN CERTIFICATE ----- and -----END CERTIFICATE-----

When you click in the page you will see that values related to validity change.


See Also

Your feedback is important to help us improve our knowledge base.
Please rate how useful you found this article by using the star rating feature at the beginning of this article.
Thank you.


certificate, renew, update, saml, sso, hybris, s4, s/4, SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics , KBA , LOD-ANA , SAP Analytics Cloud (SAC) , LOD-ANA-BI , Business Intelligence Functionality, Analytic Models , LOD-ANA-PL , Planning , LOD-ANA-BR , SAC Boardroom , LOD-ANA-PR , SAC Predictive , Problem


SAP Analytics Cloud 1.0