Anyone know if azure supports "SAML metadata exchange" that way the SAML SP signing certificate gets updated automatically when citrix rotates their saml