Error after succeeded authentication

[Cantor, Scott]

> > Just before your email, I noticed in wiki documentation that it is preferable to
> > use uri="http..." instead of ssl based ( uri="https...") in the metadata
> > provider element of shibboleth2.xml.
> 
> Can you please provide a link to this statement?

Older SP versions didn't even support https, and the main issue is that there is no support for doing anything with the transport layer, only the signature on the metadata is intended to matter. So there's no advantage to https.

The caveat is that somebody did recently find a way to hack in some support for transport checking using the TransportOption feature, but that's not a mainstream approach.

-- Scott