Thank your for posting your query on Microsoft Q&A. From above query I could understand that you are looking for a way to decrypt the encrypted SAML response token.
Please do let me know if this is not correct by responding in the comments section.
- When enabling token encryption in the Azure AD portal, you would have to provide the public key of the cert. on the application side.
- Once the certificate is imported, and the private key is configured for use on the application side, activate encryption by selecting the ... next to the thumbprint status, and then select Activate token encryption from the options in the dropdown menu.
- You would be needing the Private key of the same certificate to decrypt the SAML response.
Thanks,
Akshay Kaushik
Please "Accept the answer" (Yes), and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.