`OpenSamlAuthenticationProvider` decrypts `<EncryptedAssertion>` and `<EncryptedID>` elements. It should also decrypt `<EncryptedAttribute>` elements.