To configure your external web applications:
The endpoint receiving the SAML login request from the SAML Applications is
(where https://idp.company.com/samlserver/sso/spinitidp.company.com is your URL).
Click Download on the SAML IdP Settings page to download the certificate used by SMA to sign SAML assertions.
Or, if your SAML application supports it, you can import the IdP metadata by importing the file you exported after configuring your SAML IdP settings. For information on how to do this, refer to Enabling the SAML Identity Provider Service.