Yes, the plugin supports both signing and encryption certificates.
The signing certificate is used for sending signed SSO and SLO requests to the IDP and the encryption certificate is used for reading EncryptedAssertion.
The Premium and Enterprise versions have support for the custom certificate as well.
