where is HTTPS/HTTP set for the relying party endpoint return?

Cantor, Scott E. cantor.2 at osu.edu
Fri Aug 5 19:18:22 BST 2011


On 8/5/11 2:08 PM, "Peterson, Tommy" <Tommy.Peterson at xpandcorp.com> wrote:

>What determines whether the return endpoint for the SP on the IDP is
>HTTPS or HTTP?

YOU do. You determine the Apache settings. Not us, and not the SP.

You can't change the metadata and suddenly expect the web site to change
its spots. You deployed it with http. Changing the metadata has nothing to
do with changing the web site to use https. The metadata simply describes
your deployment. It's your deployment that's flawed.

-- Scott



More information about the users mailing list