I have Azure AD SSO setup for SDP On-Demand.  I've uploaded the cert supplied with the Microsoft SSO app configuration.  The problem I have is when I use my custom subdomain, the domain shows as not secure for an invalid cert.

For example, I go to https: subdomain.mydomain.com redirects me to my Azure AD SSO login.  After login, it redirects back to subdomain.mydomain.com with invalid cert displayed.  I cannot find a place to add the cert for this domain within SDP OD.

Of course, all works fine if I use <mydomain>.sdondemand.manageengine.com.