That's encryption. If you don't allow the IdP to treat that as optional or turn it off explicitly, encryption is assumed to be mandatory. Most people probably set the property to make encryption optional I would think, I certainly do. -- Scott