how to disable encryption and decryption in IdP

[Peter Schober]

* Raju <raju2176 at gmail.com> [2013-05-08 07:44]:
> please let me know how to disable encryption and decryption for SAML
> message in Shibboleth IdP.

It doesn't make much sense to me to disable decryption (you'd just be
unable to process such messages and things would break) but the IdP
doesn't do much (or any) decryption commonly so that's probably less
of an issue.
I guess you could also put use="signing" on the KeyDescriptor for the
IdP's public key in metadata.

To disable encryption set encryptAssertions="never" in
conf/relying-party.xml for those profiles for which you want this (or
simply all of them), as encrypting NameIDs is already disabled for all
profiles in the default config. Or create custom RelyingParty config
for those SPs for which you want this,
-peter