It's solely depends on how you have your app. Some more secure doing 'enforcement' there and/or SLO which then requires to upload cert and update it but most are default setup and technically won't matter. Same for any that are saml as identity type. We deal with so many across all spectrums so all dependent on how secure the setup is and what was required for the saml app