3770394 - What action is required for the SAP Ariba website certificate renewal?

Symptom

I received a Security Update notification regarding an SAP Ariba website certificate renewal and need to know what action to take.
I connect to SAP Ariba via SSO, API, punchout, cXML integration, or middleware using one of the impacted URLs.
My SSO integration, API connection, punchout catalog, or cXML integration stopped working after the SAP Ariba certificate renewal date.
Users are unable to sign in via SSO after the SAP Ariba certificate renewal.
I am receiving the error: The digital signature of the received SAML2 message is invalid after the certificate renewal date.
I am receiving the error: Authentication error: User does not exist after the certificate renewal date.
My punchout catalog or cXML integration is failing after the certificate renewal date.
My API connection to SAP Ariba is failing after the certificate renewal date.
I did not take action before the certificate renewal date and my connection to SAP Ariba is now broken.

Product

SAP Ariba Procurement, cloud edition all versions ; SAP Ariba Sourcing, cloud edition all versions

Keywords

sso not working after certificate, punchout failing certificate, api connection failure certificate, cxml broken certificate, certificate not updated, idp certificate update, saml certificate, certificate expiry ariba , KBA , BNS-ARI-PCP-SEC , Encryption, Key Management Service, GBaaS,File Fortification , BNS-ARI-PAS-AF-SSO , Single Sign-On , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.