From 7c22845cf017405d00a5ae35882e8a251ced1021 Mon Sep 17 00:00:00 2001
From: Connor Peshek <connor@connorpeshek.me>
Date: Fri, 16 Jan 2026 11:03:09 -0500
Subject: [PATCH] providers/saml: allow selection of certificates without
 private keys for saml encryption

---
 web/src/admin/providers/saml/SAMLProviderFormForm.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/src/admin/providers/saml/SAMLProviderFormForm.ts b/web/src/admin/providers/saml/SAMLProviderFormForm.ts
index cb31d745e1..e88605f2f4 100644
--- a/web/src/admin/providers/saml/SAMLProviderFormForm.ts
+++ b/web/src/admin/providers/saml/SAMLProviderFormForm.ts
@@ -297,6 +297,7 @@ export function renderForm({
                 >
                     <ak-crypto-certificate-search
                         .certificate=${provider.encryptionKp}
+                        nokey
                     ></ak-crypto-certificate-search>
                     <p class="pf-c-form__helper-text">
                         ${msg("When selected, assertions will be encrypted using this keypair.")}