...
Then close the SAML certificates page and reload the Service provider details page to get the new certificate in the list. then choose the new certificate in the drop-down list and press Save.
Set app to OFF for everyone and then ON for everyone
Google Workspace has a bug that makes the app unavailable for all users when a new certificate has been installed. To make the app available again, press the User access box (see below) and then select OFF for everyone and press Save. Then press the User access box once and select ON for everyone and press Save.
...
Import new certificate into Kantega SSO
Download the metadata file by pressing DOWNLOAD METADATA in the middle column and then pressing the DOWNLOAD METADATA button. The metadata file contains the newly created certificate.
...
To make Kantega SSO trust the new certificate, import the metadata file into your existing Google Workspace IdP. See the below image where you can browse and upload the metadata file to trust the new certificate:.
...