Yes, if you have configured SAML based SSO then we would have to have a SSL certificate for your vanity URL.