where is HTTPS/HTTP set for the relying party endpoint return?

[Peterson, Tommy]

Not same question. Same situation. That change caused this one in part. And now I see the connection.

Thank you.

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott E.
Sent: Friday, August 05, 2011 2:26 PM
To: users at shibboleth.net
Subject: Re: where is HTTPS/HTTP set for the relying party endpoint return?

On 8/5/11 2:20 PM, "Peterson, Tommy" <Tommy.Peterson at xpandcorp.com> wrote:

>So are you saying if the request comes from HTTP it will send it back to
>HTTP. If the request of the IDP comes from HTTPS it will expect to a
>return to HTTPS?

Same question you asked two weeks ago, same answer.

The SP generates a self-referential URL back to itself by doing exactly
what Apache tells it to do. If the resource is http, then the redirect
back will in general be http. If it's https, it will be https.

If the site is dual-schemed and runs both, you can force the SAML response
locations to https using the handlerSSL setting. That is the only setting
in general that overrides the standard Apache behavior.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

This message contains Devin Group confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.
 Please notify the sender immediately by e-mail if you have received this e-mail in error and delete this e-mail from your system. E-mail transmissions cannot be guaranteed secure, error-free and information could be intercepted, corrupted, lost, destroyed, arrive late, incomplete, or contain viruses. The sender therefore does not accept liability for errors or omissions in the contents of this message which may arise as result of transmission. If verification is required please request hard-copy version.