XML Encryption is a W3C specification defining how to encrypt all or part of an XML document, including nested and structured data, while preserving the surrounding XML structure. It supports encrypting arbitrary data, XML elements or element content, and can combine multiple encrypted parts within a single document using standard key-transport and key-wrapping conventions. It is used alongside XML Signature in SAML assertions to protect sensitive attribute values exchanged between identity providers and service providers.

Provenance