"Download Shibboleth2" configuration file is for those SP which will use IDP generated configurations in their SP setup. i.e. There is a testSP named "test.my.com" where I installed Shibboleth SP. Now I will use "generate" method in IDP's trust relationship which will "generate" configuration files for my "test.my.com" configuration. I will download those configurations and use them in my "test.my.com" shibboleth configuration. In your case, you are already giving your SP's metadata while creating trust. So, that's not "Generate" method. You can take a look at [here](http://www.gluu.org/docs/admin-guide/saml/outbound-saml/#saml-trust-relationship). Search for "Generate" Metadata Type.

This link looks broken. SAML certificate is available in your IDP's metadata. Metadata can be collected in [this](https://support.gluu.org/questions/36/idp-certificate-entityid-location-http-redirect-location-etc/) way.

Check these two links instead: 1. https://support.gluu.org/view/installation/certificates-in-idp/275 2. https://support.gluu.org/view/installation/idp-certificate-entityid-location-http-redirect-location-etc/265