Create a keystore (*.jks) for SAML in order to make it signed.

Use openssl toolkit to create a certificate.pem certificate and key.pem key.

Convert both these to certificate.der and key.der in order to add in keystore(*.jks).

Import these to the keystore using a JAVA class given here.

It will create a keystore(*.jks) to be used to make signed SAML response.

Image may be NSFW.
Clik here to view.