EncryptionMethod/DigestMethod does not follow spec #194
Description
According to section 5.4.2 of the spec for Key Transport, the EncryptionMethod/DigestMethod element is not actually required and should default to SHA1 when not specified. There are IdPs that work this way.
PR coming soon.