> The TOTP seed is encrypted and registered by a proprietary encryption > method to the LDAP referenced by Shibboleth IdP from other systems. If you're encrypting them, that's on you, that's not the IdP. The documentation notes that they can't be encrypted as they come out of the attribute resolver. -- Scott