https://community.databricks.com/t5/administration-architecture/databricks-certificate-expired/m-p/135248#M4234 <P>Hello,</P><P>I have a databricks workspace with sso authentication. the IDP is on azure.</P><P>The client certificate expired and now, I can't log on to databricks to add the new one.</P><P>How can I do? Any idea is welcomed.</P><P>Thank you!!</P><P>Best regards,</P><P>daniela</P><P>&nbsp;</P> Fri, 17 Oct 2025 13:52:42 GMT Daniela_Boamba 2025-10-17T13:52:42Z https://community.databricks.com/t5/administration-architecture/databricks-certificate-expired/m-p/135248#M4234 <P>Hello,</P><P>I have a databricks workspace with sso authentication. the IDP is on azure.</P><P>The client certificate expired and now, I can't log on to databricks to add the new one.</P><P>How can I do? Any idea is welcomed.</P><P>Thank you!!</P><P>Best regards,</P><P>daniela</P><P>&nbsp;</P> Fri, 17 Oct 2025 13:52:42 GMT https://community.databricks.com/t5/administration-architecture/databricks-certificate-expired/m-p/135248#M4234 Daniela_Boamba 2025-10-17T13:52:42Z https://community.databricks.com/t5/administration-architecture/databricks-certificate-expired/m-p/145073#M4756 <P>This is an AWS Databricks workspace and your SSO is with EntraID?</P> <P>You'll need to create a Support Ticket and then Engineering can disable-SSO temporarily allowing you to login with user+OTP.</P> <P>The long term solution here is that you should:</P> <OL> <LI>Set up Account SSO:&nbsp;<A href="https://docs.databricks.com/aws/en/security/auth/single-sign-on/#overview-of-sso-setup" target="_blank">https://docs.databricks.com/aws/en/security/auth/single-sign-on/#overview-of-sso-setup</A></LI> <LI>Set up Emergency Access:&nbsp;<A href="https://docs.databricks.com/aws/en/security/auth/single-sign-on/emergency-access" target="_blank">https://docs.databricks.com/aws/en/security/auth/single-sign-on/emergency-access</A></LI> <LI>Use Unified Login:&nbsp;<A href="https://docs.databricks.com/aws/en/security/auth/single-sign-on/unified-login" target="_blank">https://docs.databricks.com/aws/en/security/auth/single-sign-on/unified-login</A></LI> </OL> <P>[2] allows you to be able to login even if SSO issues arise.</P> <P>[3] allows you to not have to setup per-workspace SSO which is considered legacy.</P> Fri, 23 Jan 2026 22:51:13 GMT https://community.databricks.com/t5/administration-architecture/databricks-certificate-expired/m-p/145073#M4756 MoJaMa 2026-01-23T22:51:13Z