Use case questions

[ramriot]

A few questions to assist in implementation:-

1. Why is the SP metadata generated with only a 48 hour validity timestamp, this does not appear to be a local limit?
2. How to automate IDP certificate change updates?
3. What precisely does wpsimplesaml_cross_sso_form_inputs do & are there examples of implementation.

Also if I may ask, why is this excellent plugin not available through wordpress.org?