One more if you dont mind. "If a selected SAML provider does not support automated rotation of the SP SAML signing certificate, a manual rotation of the SAML signing certificate within your SAML provider must be performed in order to replace the expiring certificate" 1. Does Azure support auto rotation of keys. 2. Is there a way to check to see auto rotation is configured in Azure Saml app 3. Does anyone else get these warning emails from Citrix about Saml rotation even though thier IDP supports rotation? (Is citrix actaully verifying rotation is not configured or just sending out a warning just in cas) ?