Recently we received a "SFDC Expiring Certificate Notification" notification: "You have one or more certificates in your Salesforce org XYZ that will expire soon."
We could not remember ever having created such a thing, but who knows, we did lots of things at the start of the project. It turns out that this certificate was created indeed at the start of the project and that it is used in an identity provider (which we didn't know we had). After some googling, I found Domain Name Overview that states: "Salesforce is automatically enabled as an identity provider when a domain is created"
The article does not explain whether the created identity provider is really needed for a domain. Can we just disable the identity provider and delete the certificate? Or will users then no longer be able to log in?
And if not, why doesn't Salesforce auto-generate a new certificate and use that in the identity provider?