Make signing of SAML requests optional. The majority of IdPs do not require this, so it makes setup substantially more difficult than necessary.