diff --git a/auth_saml/models/auth_saml_provider.py b/auth_saml/models/auth_saml_provider.py
index 78e6c96f33..f1355485d7 100644
--- a/auth_saml/models/auth_saml_provider.py
+++ b/auth_saml/models/auth_saml_provider.py
@@ -232,6 +232,9 @@ def _get_config_for_provider(self, base_url: str = None) -> Saml2Config:
             "cert_file": self._get_cert_key_path("sp_pem_public"),
             "key_file": self._get_cert_key_path("sp_pem_private"),
         }
+        settings["encryption_keypairs"] = [
+            {"key_file": settings["key_file"], "cert_file": settings["cert_file"]}
+        ]
         sp_config = Saml2Config()
         sp_config.load(settings)
         sp_config.allow_unknown_attributes = True