AWS Single Sign-On supports zero-downtime external IdP certificate rotation

AWS Single Sign-on (AWS SSO) administrators can now rotate the X.509 certificates they use for external identity providers (IdPs) with zero authentication downtime.