diff --git a/lcs/root.ptl b/lcs/root.ptl
index 8598e01..df65ac7 100644
--- a/lcs/root.ptl
+++ b/lcs/root.ptl
@@ -116,7 +116,8 @@ class RootDirectory(Directory):
                 title = _('Name Identifier Format'),
                 options = [('persistent', _('Persistent')),
                     ('transient', _('Transient')),
-                    ('none', _('(none'))])
+                    ('encrypted', _('Encrypted')),
+                    ('none', _('(none)'))])
         # XXX: affiliation
         form.add(SingleSelectWidget, 'consent',
                 title = _('Consent'),
@@ -236,6 +237,8 @@ class RootDirectory(Directory):
             login.request.nameIDPolicy.format = lasso.SAML2_NAME_IDENTIFIER_FORMAT_PERSISTENT
         elif nid_format == 'transient':
             login.request.nameIDPolicy.format = lasso.SAML2_NAME_IDENTIFIER_FORMAT_TRANSIENT
+        elif nid_format == 'encrypted':
+            login.request.nameIDPolicy.format = lasso.SAML2_NAME_IDENTIFIER_FORMAT_ENCRYPTED
         elif nid_format == 'none':
             login.request.nameIDPolicy.format = lasso.SAML2_NAME_IDENTIFIER_FORMAT_NONE