The SP doesn't care about any certificates' expiration, so whatever you're talking about, you're mistaken. We follow the only trust standard for SAML that has ever been defined, and that standard does not rely on, and does not even allow for, the certificate to be evaluated in any operations. -- Scott