Log in  to the DualShield Admin Console

Go to Administration>Tasks

Look for the Replace IDP Certficate Task.  You will notice that there are two tasks...

They both do a similar job, however the Replace IDP Certificate for single SSO Server only applies  in the case where a user has multiple frontend SSO servers, and the different servers are being used as the IDP for different Service Providers.  If you just have an all-in-one setup, where the backend also acts as the frontend, you can just run the Replace IDP Certificate task.