Symptoms

X.509 IDP certificate does not get imported automatically even though the scheduled job: Refresh MultiSSO IDP Metadata is Active and the correct Metadata URL is configured on the IDP record.

We will also see the below warning in the application logs during the run of Refresh MultiSSO IDP Metadata job

WARNING *** WARNING *** *** Script: idp_metadata_url is invalid. 

Release

Jakarta onwards

Cause

Extra white space at the beginning or at the end of the URL configured on the Metadata URL from which IDP properties are imported field on the IDP record.

Resolution

Remove extra white spaces.