HTTPS SP and HTTP IDP

[Peter Schober]

* Peter Schober <peter.schober at univie.ac.at> [2013-03-28 12:35]:
> > The IDP metadata contains 0 reference to HTTPS
> [...]
> > (The exact same file is shared with both SP, the HTTP one and the HTTPS one).
> 
> I don't understand what this means.

OK, I get it. Both of your SPs -- the one running only on HTTP as well
as the one running HTTPS -- have the same IDP metadata which has only
HTTP endpoints in it.
I don't have an explanation for that behaviour.

You could look at the authentication request the SP sends to the IDP
(Olav's Firefox "SAML Tracer" extension makes this trivial). Or maybe
the SPs logs on DEBUG. But that would only show the obvious (HTTPS
URLs at the IDP).
-peter