{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/ConnectionDecryptionKeySAML",
  "title": "ConnectionDecryptionKeySAML",
  "description": "Private key used to decrypt encrypted SAML Assertions received from the identity provider. Required when the identity provider encrypts assertions for enhanced security. Can be a string (PEM) or an object with key-value pairs.",
  "anyOf": [
    {
      "type": "object",
      "description": "Key pair with 'key' and 'cert' properties.",
      "properties": {
        "cert": {
          "description": "Base64-encoded X.509 certificate in PEM format.",
          "type": "string",
          "minLength": 1,
          "maxLength": 10240
        },
        "key": {
          "description": "Private key in PEM format.",
          "type": "string",
          "minLength": 1,
          "maxLength": 10240
        }
      },
      "additionalProperties": false
    },
    {
      "description": "Private key in PEM format.",
      "type": "string",
      "minLength": 1,
      "maxLength": 10240
    }
  ]
}