Require signed Response

Require signed Assertion

Require encrypted Assertion

Sign the Attribute Query

Encrypt the Name Identifier

Mask attributes in log files