Is there a way to configure SAML assertion where the certificate gets updated automatically between the IDP and SP?

i dont believe there is. even on other products you don't see standard solutions. if the IdP metadata is online available you could script something together, but there is no regular solution.

there is something to say for that, automatically trust a new certificate can have implications if the chain is broken somewhere in between.