Add task to generate IDP cert

Although we have a path to the IDP cert, it would be nice to have the cert be generated from a variable while installing the role too.