> As mentioned previously in the thread, there is no certificate in SP metadata, > so there is nothing to revoke. The metadata is dead simple: > https://edin.samanage.com/saml/metadata Fair point but by the same logic, if nothing in it is going to change gracefully then there's no value in remotely relying on it other than introducing failure modes. -- Scott