When you create an organization, PingOne includes a default signing key and default encryption key. You can designate different keys as the default signing key and default encryption key if needed. For example, if an existing key expires, you can designate a different key as default.