Metadata-files containing the NEW certificate that is going to be used for signing Suomi.fi e-Identification SAML messages for production environment have been published on 5.5.2026

The certificates used for signing Suomi.fi e-Identification SAML messages will be replaced because the current certificates are expiring.

Changing certificates in the production environment

The new certificate for the production environment will be taken into use on 19 May 2026 at 10 o'clock. The changing of the signature certificate for the production environment means that e-services must take new metadata into use. We have published the metadata containing the new certificates on 5 May 2026 at https://tunnistus.suomi.fi/static/metadata/idp-metadata.xmlOpens in a new window..

The signing certificates for the production environment idP metadata files of the Suomi.fi e-Identification have been published and can be found at: https://kehittajille.suomi.fi/services/e-identification/how-to-implement-the-technical-setup-of-the-identification-service/metadata/e-identification-idp-metadata-signing-certificates.

E-services have two options for the implementation of the new certificate for the production environment.

1. The use of transitional metadata

If your service supports the simultaneous use of two certificates, you can use the transitional metadata. In this way, the implementation of the new signature certificate can be flexibly carried out beforehand. Using the transitional metadata, Suomi.fi e-Identification works with both the current signature certificate and the new certificate to be brought in on 5 May 2026.

2. Implementing the new metadata directly

If your service does not support the simultaneous use of two certificates, the new metadata must be implemented in your customer service at the same time as it is changed in Suomi.fi e-Identification, on 19 May 2026 at 10 o'clock. The secondary metadata has been published 5 May 2026 at https://tunnistus.suomi.fi/static/metadata/idp-metadata-secondary.xmlOpens in a new window..

Timetable for change of certificate

• 5 May 2026 – Publication of metadata containing new certificates for production environment
• 19 May 2026 – Production environment certificate will be changed at 10 o’clock