### Steps to reproduce

1. As an admin, go to Administration -> Authentication -> SAML Providers

2. Create a new SAML provider

3. In the metadata section, Begin of the deletion select "Metadata URL" andEnd of the deletion provide a Begin of the insertionmetadata XML file with multiple certificates inside the `IDPSSODescriptor` section (either via URL or XML)

1. see attached XML file asEnd of the insertion Begin of the deletion validEnd of the deletion one Begin of the insertionexample

End of the insertion Begin of the deletion

End of the deletion 4. Click on update


### What is the buggy behavior?

* in the primary configuration section, the "Public certificate of identity provider" field is empty


### What is the expected behavior?

1. the field "Public certificate of identity provider" should be filled with the Begin of the insertioncertificatesEnd of the insertion Begin of the deletion certificateEnd of the deletion extracted from the metadata URL


### Environment information

**OpenProject installation type**

* Hosted cloud edition


**OpenProject version**

_v15.5.0_