I am an admin for Box, and I am trying to update the SSO certificate. I already created one in Microsoft Entra, and I am following this documentation:

Using Self Service SSO Certificate Management – Box Support

When I go to upload the new cert, I am getting this error message:

“You currently have the maximum of 2 SSO certificates. Please remove 1 certificate and try again.”

At the top of our SSO certs it says “7 of 2 in use”, however only one is our cert in Entra. We have 6 other certs that just say “accounts.accesscontrol.windows.net” with different expiration dates going to late 2027. I am wondering if those certs are safe to remove. I would not like to remove our one active cert because then users would not be able to access the application. Can I get some assistance on this?