Support encrypted SAML assertions

Most identity providers support the ability to encrypt the assertions sent from an identity provider to a service provider like Atlassian.

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/howto-saml-token-encryption

Atlassian would provide a public key certificate that can be uploaded to the identity provider to encrypt the assertions.