Many commercial SPs don't handle encryption, that's up to you to disable per RP in the IdP or decdie to just disable it entirely, as you choose. -- Scott