...

The sign and encrypt engine has one configuration file. On Docker deployments it is located in docker/compose/identitymanager/config/signencrypt.xml, on WAR deployments it is located in WEB-INF/classes/engineSignEncryptConfig.xml of IDM Admin and IDM Operator.
There are also several tools including a similar configuration file.

Structure

...

of the configuration file

The configuration is divided into entries for descriptors and keys. Each descriptor handles one distinct use case and references one of the key-entries.

...