...
The process described in this guide ensures uninterrupted certificate exchange with services that operate in accordance with the SAML specifications. There are SAML products on the market that do not support the key exchange process. Certificate exchange requires either manual action, scheduled certificate exchange with services, or service login does not work at all while two certificates are published in the metadata. Haka does not support scheduled certificate exchange without strong reasons, as it is impossible to agree on a common metadata update time for all services.
...