How to get sha256 certificate for SAML SSO addon

I believe you need this.

See the signatureAlgorithm property. Default value is SHA1 but it can be changed to SHA256, which is what you need.