diff --git a/ssoauth/app_settings/__init__.py b/ssoauth/app_settings/__init__.py
index 7381b964944d39b4a610810a5914acb51d83b863..301e69e0d4bf73a5a9aa6628d63f1c4987a069bd 100644
--- a/ssoauth/app_settings/__init__.py
+++ b/ssoauth/app_settings/__init__.py
@@ -65,7 +65,7 @@ ONELOGIN_SETTINGS_TEMPLATE = {
         "wantAssertionsSigned": True,
         "wantNameId": False,  # set to True for SLO support (Single Log Out)
         "wantNameIdEncrypted": False,
-        "wantAssertionsEncrypted": True,
+        "wantAssertionsEncrypted": False,
         "signatureAlgorithm": "http://www.w3.org/2001/04/xmldsig-more#rsa-sha512",
         "metadataCacheDuration": "P{n}D".format(n=SP_METADATA_LIFETIME_DAYS),
         "metadataValidUntil": (datetime.now() + timedelta(days=SP_METADATA_LIFETIME_DAYS)).strftime('%Y-%m-%dT%H:%M:%S.%fZ')