SAP Knowledge Base Article - Public

2542839 - Service Provider certificate expires in X days message in SAP Analytics Cloud ***FAQ***


You received an email indicating Service Provider certificate expires in 30 days.

After a successful logon to SAP Analytics Cloud you can see a similar message.


  • SAP Analytics Cloud


SAP Analytics Cloud uses SAML as authentication method. Therefore, it always uses certificates. It is a Service Provider for the standard SAP Cloud Identity as well as for SAP Cloud Platform HANA databases.



To Renew the SAP Analytics Cloud certificate (SAML Service Provider) using the menu System > Administration > Security


When the renew process is completed, it will download the new metadata.xml immediately to your browser. Please, save this file to be used in other systems.

If you use the standard SAP Cloud Identity

If you are not 100% sure of what this means, try to login to your tenant, you should be redirected to:

If that is the case, you are using the Standard SAP Cloud Identity. You don't need to do anything else.

If you are using a custom SAML Identity Provider

Send the saved metadata.xml file to your SAML IdP administrator to update the certificate. If you are using Active Directory Federation Services (AD FS), your AD admin can follow the steps indicated in KBA 2506765

You configured an SAP Cloud Platform connection using SAML SSO

You configured a Live connection to HANA in SAP Cloud Platform following our guide: Live Data Connection to SAPCP with SSO

You will need to update your HANA database using the steps described in that document.

You configured Hybris Cloud Edition or S/4HANA Cloud Edition

Using SAML SSO: You need to follow the steps indicated in the KBA 2654241 to update your own SAP Cloud Identity Authentication Service (IAS).

Using OAuth: This authentication method also uses the certificate that you renewed. You need to edit the connection as indicated in the section: Live Data Connection to SAP S/4HANA Cloud Edition via OAuth

Do I need to change Cloud Connector or importing connections?

No. Renewing this certificate only affects the SAML configuration as a Service Provider. Importing data from data sources doesn't use SAML.

See Also

Your feedback is important to help us improve our knowledge base.
Please rate how useful you found this article by using the star rating feature at the beginning of this article.
Thank you.


SAML, certificate, renew, renewal, expired, expiration, Cloud for Analytics, BusinessObjectsCloud, BOC, SAC, SAP BusinessObjects Cloud, Business Objects, SAC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics , KBA , LOD-ANA , SAP Analytics Cloud , LOD-ANA-BI , SAP Analytics Cloud - Business Intelligence (BOC) , LOD-ANA-PL , SAP Analytics Cloud – Planning (BOC) , Problem


SAP Analytics Cloud 1.0