SAML Certificate Rollover

We’re experiencing an issue about not being able to log in to our self-hosted Sentry 20.7.2 using SAML auth method, because the certificate on our ADFS server had been updated recently.
The message we see is Authentication error: SAML SSO failed, Signature validation failed. SAML Response rejected.
Is there a way to change the x509cert by editing the auth configuration via Shell from web container without reconfiguring it from scratch?
And if there is no way to do it, what will happen to existing users, if we delete the configuration using * AuthProvider.objects.all().delete()* and recreate it again? Will they have to link their accounts again?

1 Like