SSO certificates can expire. If administrators forget to replace the certificate in time, all users of that organisation will be locked out when they use the "enforce SSO" option. To minimize the risk of users being locked out, we will send a reminder email to administrators to inform them that the certificate will expire, for example, in 7 days and that they need to replace it.