diff --git a/app/controllers/users/omniauth_callbacks_controller.rb b/app/controllers/users/omniauth_callbacks_controller.rb
index 7a909aca6d9d195c7f0b56d872d8a940b599ead8..d50f938f96425354d5247bddf96c31b7be58efbb 100644
--- a/app/controllers/users/omniauth_callbacks_controller.rb
+++ b/app/controllers/users/omniauth_callbacks_controller.rb
@@ -21,6 +21,8 @@ class Users::OmniauthCallbacksController < Devise::OmniauthCallbacksController
     request.env['omniauth.strategy'].options[:idp_sso_target_url] = current_context.sso_target_url
     request.env['omniauth.strategy'].options[:idp_cert] = current_context.sso_cert
     request.env['omniauth.strategy'].options[:name_identifier_format] = current_context.sso_name_identifier_format
+    request.env['omniauth.strategy'].options[:security] ||= {}
+    request.env['omniauth.strategy'].options[:security][:want_assertions_signed] = true
 
     render plain: "Omniauth SAML setup phase.", status: 404
   end