SSO Certificate Renewal

Summary:

How do we update the SSO certificate as it is coming up for renewal?

Content (please ensure you mask any confidential information):

I had found other threads telling the customers to update the metadata for the IDP but per our systems admin "All Enterprise apps require to verify certificate with azure , otherwise SSO won’t work, XML never changes and it contains configuration on azure." How do we renew the SSO certificate if the metadata never changes?

I tried updating the metadata as well and it doesn't seemed to have done anything. The test failed after activating the new cert.