Evaluates whether the validity period of each CloudSSO SAML signing certificate exceeds the specified number of days (default: 90). Certificates meeting this threshold are Compliant.
Scenarios
Regular certificate checks reduce security risks and maintain system stability.
Risk level
Default risk level: high.
You can change the risk level when you apply this rule.
Compliance evaluation logic
-
Compliant: the validity period of each CloudSSO SAML signing certificate exceeds the specified number of days (default: 90).
-
Non-compliant: the validity period of a CloudSSO SAML signing certificate does not exceed the specified number of days (default: 90).
Rule details
|
Item |
Description |
|
Rule name |
cloudsso-directory-saml-expired-check |
|
Rule ID |
|
|
Tag |
CloudSSO |
|
Automatic remediation |
Not supported |
|
Trigger type |
Periodic execution |
|
Evaluation frequency |
Every 24 hours |
|
Supported resource type |
CloudSSO directory |
|
Input parameter |
days. Default value: 90 |
Non-compliance remediation
Ensure that the validity period of each CloudSSO SAML signing certificate exceeds the specified number of days. Overview.