I've looked at that module and it looks to me like it is being used for user authentication. The principles do like very similar though. Although I have got the values out of the token I suspect I am the same in that I don't know enough about SAML and the decryption. I shall have to keep looking and trying for the moment. I still suspect that perhaps I have the concept of decryption wrong... Thanks again for trying to help though.