The protocols can be configured to sign authentication requests and responses.
To view your current configuration:
Click Devices > Identity Servers > Edit.
In the Identity Provider section, view the setting for the Require Signed Authentication Requests option. If it is selected, all authentication requests from service providers must be signed.
In the Identity Consumer section, view the settings for the Require Signed Assertions and Sign Authentication Requests options. If these options are selected, assertions and authentication requests are signed.