Hi,
We've got several customers for which we're using ADFS 3.0.
In all cases we configure autorenewal for the federation certificates.
This article confirms no actions need to be taken when the requirements are met :
The AD FS property AutoCertificateRollover must be set to True
The AD FS federation metadata is publicly accessible.
However.. It takes some time before the metadata gets updates after this auto renewal takes place.
This script available on technet is used to update this metadata, but it's not clear that this still needs to be used, or not?
