Hello, 

The Service provide certificate is used if you are signing the request to the IDP. So you should be able to use any certificate, even a self-signed beacuse the public part of the certificate will be shared to the IDP thru the SP.xml