Navigate to "SSO | SSO Servers"
Click the context menu of the Single Sign-on server and select "Download IdP Certificate"