POST `/admin/identity-providers/{id}/certificates/{cert_id}/rotate`

Revoke the old certificate and upload a new one

Identity Providers `bearerAuth` application/json

Request Parameters

Name	In	Type	Required	Default	Example	Constraints	Description
`id`	`path`	`string`	Yes				Provider ID
`cert_id`	`path`	`string`	Yes				Old certificate ID

Schema: dto.RotateCertificateRequest

Field	Type	Required	Example	Constraints	Description
`cert_pem`	`string`	Yes	`-----BEGIN CERTIFICATE-----...`
`name`	`string`	No	`Rotated SAML Signing Cert`

Status	Description	Schema
200	OK	`dto.CertificateDetailResponse`
400	Bad Request	`dto.SimpleResponseWrapper`
401	Unauthorized	`dto.SimpleResponseWrapper`
404	Not Found	`dto.SimpleResponseWrapper`
500	Internal Server Error	`dto.SimpleResponseWrapper`

Field	Type	Required
`code`	`integer`	No
`data`	`dto.ProviderCertificateResponse`	No
`message`	`string`	No
`timestamp`	`string`	No

Identity provider certificate information

Field	Type	Required	Example
`created_at`	`string`	No	`2026-04-15T10:30:00Z`
`expires_at`	`string`	No	`2027-04-15T10:30:00Z`
`fingerprint`	`string`	No	`sha256:abc123def456`
`id`	`string`	No	`cert_abc123`
`name`	`string`	No	`My SAML Signing Cert`
`provider_id`	`string`	No	`idp_xyz789`
`status`	`string`	No	`active`
`type`	`string`	No	`signing`

Field	Type	Required	Example	Constraints	Description
`code`	`integer`	No
`message`	`string`	No