Per MS' documentation, Power Pages will not accept encrypted SAML assertions from any identity provider -

We are implementing Power Pages in the Azure GCC High environment, and are subject to federal government audits. Right now, this will be a strike against us per NIST 800-53 standards for SAML authentication. I understand this is not on the roadmap for Power Pages, but this will get to be a bigger customer requirement going forward.