Basware Single Sign-On (SSO) Certificate Renewal - 2026

Summary:

The certificate for Basware Single Sign-On (SSO) will expire on November 11, 2026. To ensure a smooth transition, we will perform maintenance on October 25, 2026, between 06:00 and 12:00 UTC. During this window, a new SSO certificate will be activated, and the expiring certificate will be removed.

As part of this renewal, Basware is changing the certificate provider from GlobalSign to Amazon Trust Services. Customers using custom trust stores or manually managed certificate chains may also need to import the Amazon root and intermediate CA certificates, which is included in the certificate package.

Expiring Certificate Details:

Serial Number: ‎ 5a3b2672a74aac026bb080a5
Issuer: GlobalSign GCC R3 DV TLS CA 2020
Subject: CN = *.p2p.basware.com
Validity Date: October 10, 2025, to November 11, 2026

New Certificate Details:

Serial Number: ‎ 0a6bc2863bd35b942a004cb789bcf000
Issuer: Amazon RSA 2048 M01
Subject: CN = *.p2p.basware.com
Validity Date: October 14, 2026, to April 29, 2027

Please note that, as a first step, the new SSO certificate has been added as secondary and is updated in the federation metadata.

Instructions:

For customers using a local Basware metadata file

If the Single Sign-On (SSO) integration with Basware is configured using a local copy of Basware's federation metadata file, there are below options available:

After the communicated October 25 maintenance is complete, the latest metadata file can be downloaded by using the URL: https://sso.p2p.basware.com/FederationMetadata/2007-06/FederationMetadata.xml
In case you require the new *.p2p.basware.com certificate in advance, you can download the new public certificate. Please make sure not to make the change before the October 25 planned maintenance.

For Customers using Basware Metadata URL

If SSO integration is configured using Basware federation metadata URL https://sso.p2p.basware.com/FederationMetadata/2007-06/FederationMetadata.xml and configured to automatically update metadata information at regular intervals. It is recommended that a manual trigger of the metadata update be performed after the certificate maintenance on October 25, 2026.

Basware Recommendations:

Please do not delete or remove the existing IdP trusts configured in your SSO solution. In case a trust deletion is mandatory, please keep a backup of the current trust setup as this will help in troubleshooting if any issues in the new trust setup are encountered.
Test the SSO login to Basware services after the certificate maintenance on October 25, 2026.

Frequently asked questions:

Q: Which Basware services will be affected by this maintenance?
A: Logins to Basware services such as AP&P, CloudScan, Portal, SmartPDF, and ScanMarket will be affected if they are accessed using Single Sign-On (SSO) authentication.

Q: Will SSO logins to Basware development, test, and production systems be impacted on different dates?
A: No. A single SSO system serves all customer environments (development, test, and production). Therefore, the maintenance scheduled for October 25, 2026, will impact all of them simultaneously.

Q: What should I do if my IdP trust for Basware SSO does not have a configuration setting for a certificate or metadata URL?
A: If your IdP setup does not require a certificate or metadata URL, no action is needed. However, we recommend testing your SSO access to the service after the October 25, 2026, maintenance to ensure everything works as expected.

Q: How will my Basware service access and usage be impacted if I do not take the necessary actions in a timely manner?
A: If your IdP setup requires Basware's certificate and the new certificate is not updated in your IdP trust after the October 25 maintenance, SSO logins to Basware services will stop working. You will be unable to access the services using SSO until the certificate is updated.

Q: Who should I share this maintenance information with in my organization?
A: Please share these maintenance details with your IT department or the IT service provider responsible for managing your organization's IdP trust with Basware services.

Q: If there are multiple IdP trusts set up to authenticate users to Basware, what actions are required in relation to this maintenance?
A: The October 25, 2026 maintenance will affect SSO authentication for all IdP trusts used to access Basware services. Each IdP trust must be updated with the new certificate to ensure continued access.

Q: What should we do if we update the certificate or IdP trust on our side on October 25, 2026, but encounter errors when trying to log in to Basware service?
A: If you experience any SSO login issues after the maintenance, please contact Basware Support. Submit a standard case through this link and reference Service ticket: BWPB0049122.

Q: If we access AP&P through Verian and use SSO for authentication, will we be affected by this maintenance?
A: No, SSO authentication to AP&P via Verian integrations will not be affected by the certificate update. No action is required on your part.