Configurable Azure AD SAML token encryption