Automated SSO certificate rotation
Kunjae runs as a scheduled job in your Azure tenant. It rotates SSO certificates before they expire and verifies each rotation before anything breaks.
The problem
SSO certificates are the backbone of any modern enterprise. They expire and need to be rotated in what any IT admin can only describe as a truly painful experience.
A lapsed certificate could result in locking your entire user base out of a critical application, while your IT Team chases support channels that are becoming increasingly harder to reach. This manual process built on email reminders and a constant state of fear is truly overdue for automation.
The solution
Kunjae runs as a scheduled job inside your own Azure tenant. It watches certificate expiry across your identity provider, rotates certificates automatically ahead of expiry, and verifies the rotation actually took effect before anything breaks.
Why self-hosted, zero-egress
- No vendor uptime dependency. You don't rely on our infrastructure.
- No critical business data, credentials, or telemetry ever reach vendor infrastructure. We never see your secrets. Ever.
- Security first design. Kunjae was designed from the ground-up with security at its core. We know what customers expect from a security product, because we are cybersecurity engineers and systems administrators ourselves.
How it works
- Deploy: Use our fully-templated BICEP files to deploy the Azure infrastructure needed to run Kunjae
- Configure: Declare your SSO-integrated platforms in a version-controlled config file.
- Rotate: Kunjae checks certificate expiry on a configurable schedule and rotates automatically on your parameters.
- Verify: Each rotation is confirmed end-to-end before it's considered complete, and you're notified either way.
Get in touch about the Founder's license.
Contact us