...
As we support suomi.fi-tunnistus, the nation-level authority in strong identification in Finland, we are enforced to do this certification change from time to time. At the time of writing this, the change is on-going. More information is available here: <https://palveluhallinta.suomi.fi/en/ajankohtaista/uutiset/5f844ad576a9630847c1e9b1> (external link, verified working when last edited this page).
It is recommended to have an additional non-production-use namespace configured with user directory for Suomi.fi-tunnistus. This allows for completely safe testing, validation, and verification in production without the risk of breaking the production namespace(s).
Process
Typically this change process is straightforward, but when it also affects production, one has to be vary careful, and be prepared for a roll-back. How roll-back is done, is described below.
...
Clear off the current metadata so the field “IdP metadata XML” is empty.
Copy to clipboard the new metadata on text editor.
Paste new metadata to the field “IdP metadata XML”. If there is a problem with the metadata, the field will turn to red and there will be and error message. You should Revert to previous configuration, and not to save changes, and that will break the user directory.
Select “Save” at the top-right on the user directory editor. Then select “Close”.
...