Plugin name: SAML Plugin
Plugin version: 1.1.3
In this version, there is an inverted management of the checkbox "Disable Auth Request Signature".
When it is not checked, the "securityRealm/metadata" route does not expose anymore the certificated.
When it is checked it expose the certificate.
That should be the opposite.