diff --git a/lib/config/index.js b/lib/config/index.js
index d4b5f7e44..e0ab51512 100644
--- a/lib/config/index.js
+++ b/lib/config/index.js
@@ -164,6 +164,10 @@ if (['filesystem', 's3', 'minio', 'imgur', 'azure', 'lutim'].indexOf(config.imag
   config.imageUploadType = 'filesystem'
 }
 
+if (config.isSAMLEnable && !config.saml.wantAssertionsSigned && !config.saml.wantAuthnResponseSigned) {
+  logger.error('You can only deactivate one of "saml.wantAssertionsSigned" and "saml.wantAuthnResponseSigned"')
+}
+
 // figure out mime types for image uploads
 switch (config.imageUploadType) {
   case 'imgur':