Sign the Response

Sign the Assertion

Encrypt the Assertion

Require signed Attribute Query

Require an encrypted Name Identifier