The main things to remember about certificate rollover from experience are: - Publish the signing certificates ahead of time in the metadata before using them.

The main things to remember about certificate rollover from experience are: - Publish the signing certificates ahead of time in the metadata before using them. - Install any new encryption certificates on your service (supporting old and new certificates) before publishing the certificates in the service metadata. In terms of SAML testing, https://samltest.id/ https://samltest.id/ is useful for short-term testing of both IdPs and SPs.