How to Update an Expiring SSO Certificate for Jump Desktop Teams

Updating an expiring SSO (Single Sign-On) certificate ensures continuous access to Jump Desktop through your identity provider (IDP). This guide walks you through the process, including backup measures to prevent lockouts.

a. Prerequisites and Fallback:

1. Disable ENFORCE SSO Sign-in (temporary):
   • Log in at https://app.jumpdesktop.com, select your team on the left, then go to Tasks -> Security.
   • Make sure SSO is not enforced for Team logins.
2. Set a Password for Your Jump Desktop Account (backup access):
   1. From the top-left corner of the dashboard, click Security.
   2. Click Set Password if it's displayed there.
3. If you have previously enabled MFA for your account, make sure you have your MFA device.
4. Log into your old IDP provider and make sure your old IDP Metadata is available as a backup to revert changes if necessary.

b. Updating Your Expiring Certificate:

1. Visit your SSO provider and update the necessary certificate.
2. Download the IDP metadata or Federated XML file from your provider. To learn how to do this for your provider, take a look at the SSO setup guide, scroll down to the section where it asks you to download the XML metadata file.
3. Once you have your new SSO IDP XML, upload it to your Jump Desktop for Teams account:
   1. Sign in to https://app.jumpdesktop.com.
   2. Click your team name on the left, then go to Tasks -> Security -> Manage SSO.
   3. Click Upload IDP Metadata and upload the XML file.

c. Test the New Certificate

1. Use a new Incognito browser window and go to https://app.jumpdesktop.com.
2. Click Sign in with SSO and try signing in with company credentials. If sign in works, you can move to the finalize step below.

d. Revert if Needed:

If you can’t log in, revert to your old IDP Metadata from the original browser session.

e. Finalize

After successful testing, re-enable ENFORCE SSO if it was disabled.

That’s it. Ensure you have fallback methods in place while you update your IDP certificate, and test thoroughly before locking things down again.