Notice from Adobe about IdP SHA-1 certificates

Joseph Fischetti Joseph.Fischetti at
Tue Jul 21 12:51:39 UTC 2020

I'm nearly 100% certain that the certificate they're referring to is their SP certificate (as I said in a prior email).

In following their instructions to correct the issue, you must add an additional IdP to your existing directory.  I added a new one and didn't configure anything (so there's 2 "SAML Providers" listed.  The old one is active, the new one has no metadata associated with it).  The old one says "Certificate type SHA-1" and "Creation Date - Before April 15, 2020".  The new one says "Certificate Type SHA-256" and "Creation Date - July 15, 2020".

If they were in fact referring to the IdP certificate, there would be no cert type associated with the new "SAML Provider" since I haven't uploaded any metadata yet.  Then again, Scott hit the nail on the head;
"No idea how this works or what any of this means " describes 95% of the vendors...

More information about the users mailing list