# \[IGN-2501\] SAML authentication with encryption certificate in SP metadata

**URL:** <https://forum.inductiveautomation.com/t/ign-2501-saml-authentication-with-encryption-certificate-in-sp-metadata/116101>\
**Category:** Ignition\
**Created:** [June 22, 2026, 7:20pm UTC](https://forum.inductiveautomation.com/t/ign-2501-saml-authentication-with-encryption-certificate-in-sp-metadata/116101 "2026-06-22T19:20:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![axkeller](https://avatars.discourse-cdn.com/v4/letter/a/ecd19e/32.png) [@axkeller](https://forum.inductiveautomation.com/u/axkeller)\
**Post date:** [June 22, 2026, 7:20pm UTC](https://forum.inductiveautomation.com/t/ign-2501-saml-authentication-with-encryption-certificate-in-sp-metadata/116101/1 "2026-06-22T19:20:46Z")

</div>

New Ignition user, apologies if this was answered previously (I did see a similar post from 2021).

Version/OS: Ignition 8.3.6 on Ubuntu Linux 26.04 LTS

**Issue:** We are configuring SAML authentication and our Identity Provider (IdP) requires an encryption certificate in SP metadata (KeyDescriptor with use="encryption") and the ability to decrypt encrypted SAML assertions.

**Question:** Does Ignition natively support these IdP requirements? If so, where do I find the GUI/CLI configuration documentation. If not, are there any workarounds?

Thanks!

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [June 22, 2026, 9:30pm UTC](https://forum.inductiveautomation.com/t/ign-2501-saml-authentication-with-encryption-certificate-in-sp-metadata/116101/2 "2026-06-22T21:30:46Z")

</div>

Ignition does not yet support SAML encryption. We have an existing internal ticket that I will link this thread to.

---

<div class="post-metadata">

**Author:** ![axkeller](https://avatars.discourse-cdn.com/v4/letter/a/ecd19e/32.png) [@axkeller](https://forum.inductiveautomation.com/u/axkeller)\
**Post date:** [June 23, 2026, 12:25am UTC](https://forum.inductiveautomation.com/t/ign-2501-saml-authentication-with-encryption-certificate-in-sp-metadata/116101/3 "2026-06-23T00:25:50Z")

</div>

hi Joel -- Thanks for promptly letting me know. We will explore our other options.