Penn just recently switched from the Adobe-Okta implementation to their new Adobe SAML implementation. The old Okta SP signing cert was indeed SHA-1. The new Adobe SP signing cert is SHA-256. I believe the Adobe communication is a push to move from the old Okta system to the new Adobe system as some have said here. - Steve