The primary AD FS token-decrypting certificate will expire in less than 90 days. Once it expires, your Office 365 users won't ...