---
title: "Verify and update Okta certificate"
slug: "verify-and-update-okta-certificate"
updated: 2025-11-05T04:15:25Z
published: 2025-11-05T04:15:25Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.madkudu.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify and update Okta certificate

## Context

When [configuring Okta SSO for](https://help.madkudu.com/docs/configuring-okta-sso-for-madkudu)HG Insights, a certificate with an expiration date is required. Once invalid, the certificate needs to be updated. Unfortunately, Okta doesn’t warn its users of the certificate expiration. The HG Insights team will reach out proactively to your team when there’s a new certificate available.

## How to verify Okta certificate

### Step 1

Okta Admin > Applications > HG Insights

![](https://cdn.document360.io/a55e7ea5-b8ac-4456-874d-10cc92097370/Images/Documentation/Screenshot 2025-04-11 at 08.41.47(1).png)

### Step 2

SAML Settings > General > Signature Certificate > verify that the year bracket in the name includes the current period.

In the image below, ‘2024-2027’ time bracket includes 2025 so you’re covered if looking at this tutorial in October 2025.

*Note:*

- *if there is no period mention in the name, it also mean it's invalid*

![](https://cdn.document360.io/a55e7ea5-b8ac-4456-874d-10cc92097370/Images/Documentation/Screenshot 2025-04-11 at 08.49.26.png)

## How to update Okta certificate

### Step 1

Download the valid certificate [here](https://help.madkudu.com/docs/configuring-okta-sso-for-madkudu#1-add-the-madkudu-custom-app-to-okta)

![](https://cdn.document360.io/a55e7ea5-b8ac-4456-874d-10cc92097370/Images/Documentation/Screenshot 2025-04-11 at 09.04.36.png)

### Step 2

Okta Admin > Applications > HG Insights > SAML Settings > “Edit”

![](https://cdn.document360.io/a55e7ea5-b8ac-4456-874d-10cc92097370/Images/Documentation/Screenshot 2025-04-11 at 08.56.13.png)

Click “Next”, without changing anything

Note: The end of the URL displayed in the picture above */3303* should be replaced by your HG Insights tenant number in your Okta instance. It’s thus normal if you have a different URL displayed.

![](https://cdn.document360.io/a55e7ea5-b8ac-4456-874d-10cc92097370/Images/Documentation/image-1744882329955.png)

Click “Show Advanced Settings”

![](https://cdn.document360.io/a55e7ea5-b8ac-4456-874d-10cc92097370/Images/Documentation/Screenshot 2025-04-11 at 08.42.48.png)

Upload the new certificate you just downloaded

![](https://cdn.document360.io/a55e7ea5-b8ac-4456-874d-10cc92097370/Images/Documentation/Screenshot 2025-04-11 at 09.06.06.png)

Go to the end of the edit flow, without changing anything else.

A tenant number in MadKudu is a unique identifier assigned to each customer organization. This number is used throughout the platform to identify which organization's data you're accessing or modifying.

To find your tenant number: In any MadKudu admin or studio page URL, look for the 4 consecutive numbers that show up across pages consistently. The tenant number may be useful to you in some specific setup cases, although it's mostly used internally by Madkudu staff.