IdP TLS termination at load balancer

[Paul Hethmon]

You need to properly configure Jetty to say the connection is secure when its not (due to termination at the load balancer). I don’t know how that is done in Jetty, but it’s pretty simple in Tomcat.

> On Apr 21, 2015, at 2:44 PM, Sean Mason <sean.mason at uwaterloo.ca> wrote:
> 
> Is there some Jetty and/or Shibboleth configuration beyond changing the SSO HTTP-Redirect metadata endpoint that will enable this type of setup, or will I require TLS pass-through or re-encryption at the load balancer? 

-----
Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com