diff --git a/server-ce/hotfix/5.5.3/saml-ext.patch b/server-ce/hotfix/5.5.3/saml-ext.patch
new file mode 100644
index 0000000000..43e703d100
--- /dev/null
+++ b/server-ce/hotfix/5.5.3/saml-ext.patch
@@ -0,0 +1,13 @@
+diff --git a/services/web/modules/authentication/saml/app/src/SAMLModuleManager.mjs b/services/web/modules/authentication/saml/app/src/SAMLModuleManager.mjs
+index 29e9ae52cd..335ace8209 100644
+--- a/services/web/modules/authentication/saml/app/src/SAMLModuleManager.mjs
++++ b/services/web/modules/authentication/saml/app/src/SAMLModuleManager.mjs
+@@ -26,7 +26,7 @@ const SAMLModuleManager = {
+       callbackUrl: `${Settings.siteUrl.replace(/\/+$/, '')}/saml/login/callback`,
+       issuer: process.env.OVERLEAF_SAML_ISSUER,
+       audience: process.env.OVERLEAF_SAML_AUDIENCE,
+-      cert: readFilesContentFromEnv(process.env.OVERLEAF_SAML_IDP_CERT),
++      idpCert: readFilesContentFromEnv(process.env.OVERLEAF_SAML_IDP_CERT),
+       privateKey:  readFilesContentFromEnv(process.env.OVERLEAF_SAML_PRIVATE_KEY),
+       decryptionPvk:  readFilesContentFromEnv(process.env.OVERLEAF_SAML_DECRYPTION_PVK),
+       signatureAlgorithm: process.env.OVERLEAF_SAML_SIGNATURE_ALGORITHM,
diff --git a/services/web/modules/authentication/saml/app/src/SAMLModuleManager.mjs b/services/web/modules/authentication/saml/app/src/SAMLModuleManager.mjs
index fba235de3d..bf3e1767ef 100644
--- a/services/web/modules/authentication/saml/app/src/SAMLModuleManager.mjs
+++ b/services/web/modules/authentication/saml/app/src/SAMLModuleManager.mjs
@@ -26,7 +26,7 @@ const SAMLModuleManager = {
       callbackUrl: `${Settings.siteUrl.replace(/\/+$/, '')}/saml/login/callback`,
       issuer: process.env.OVERLEAF_SAML_ISSUER,
       audience: process.env.OVERLEAF_SAML_AUDIENCE,
-      cert: readFilesContentFromEnv(process.env.OVERLEAF_SAML_IDP_CERT),
+      idpCert: readFilesContentFromEnv(process.env.OVERLEAF_SAML_IDP_CERT),
       privateKey:  readFilesContentFromEnv(process.env.OVERLEAF_SAML_PRIVATE_KEY),
       decryptionPvk:  readFilesContentFromEnv(process.env.OVERLEAF_SAML_DECRYPTION_PVK),
       signatureAlgorithm: process.env.OVERLEAF_SAML_SIGNATURE_ALGORITHM,