The SP metadata is written on every login, it is a little exaggerated, take a look if we can write it when the configuration is made.
https://github.com/jenkinsci/saml-plugin/blob/master/src/main/java/org/jenkinsci/plugins/saml/OpenSAMLWrapper.java#L149