If you have multiple clients who each sign their own SAML assertions. How do you get more than one certificate into a truststore? When you attempt to post a new cert (into a keystore/alias), the request fails with a message about the cert already existing.