Enhance Box SSO to support metadata based certificate management
Requested Enhancement:
Support configuring a SAML Metadata URL instead of requiring static metadata uploads
Automatically retrieve and refresh metadata on a scheduled basis (at least every 24 hours)
Automatically trust both current and rollover signing certificates published in IdP metadata
Cache the last known valid metadata if the Metadata URL is temporarily unavailable
Provide administrator logging and notifications when metadata retrieval or processing fails
Business Benefits:
Aligns with enterprise identity management best practices
Reduces manual administrative effort for certificate rotation
Minimizes the risk of authentication outages during certificate rollover
Supports compliance with increasingly shorter certificate lifecycles
Eliminates support dependency for certificate updates, especially in multi IdP environments
Improves overall operational resilience and security
Anonymous
shared this idea