Virgo will rotate its SAML Service Provider (SP) signing certificate on Friday, May 23, 2025 at 18:00 PST. This certificate is part of our internally managed PKI and is rotated every two years to align with our security policies. Updated SAML metadata, including the new certificate, will be available after 18:00 PST at the normal meta endpoint.
No action is required for identity providers that support dynamic metadata updates. If your IdP uses a static configuration, you must manually download and import the updated metadata XML from the appropriate URL after the rotation time.
Please note that requests signed with the old certificate will be rejected after the rotation. If you need advanced access to the updated certificate for testing or assistance validating the new metadata, contact us at support@virgosvs.com
Posted May 20, 2025 - 16:53 UTC
This incident affected: Web Services (Virgo Cloud, Trials).