Brent, it looks like the old IdP hardwired the key placement option on the SAML Encrypter class to INLINE. I could make that an option in the profile action, but should we just make it part of the EncryptionConfig/Parameters classes so that it's just part of the rest of the options? -- Scott