IDP Sending Users to Unsecure HTTP Connection

[David E. Newswanger]

Hi All,


I reconfigured Apache to redirect HTTP to HTTPS and changed the endpoint to point to the HTTPS link. It seems to work now. Thanks!


Cheers,

   David Newswanger


________________________________
From: users <users-bounces at shibboleth.net> on behalf of David E. Newswanger <David_Newswanger at berea.edu>
Sent: Monday, December 21, 2015 12:29 PM
To: users at shibboleth.net
Subject: IDP Sending Users to Unsecure HTTP Connection


I recently installed a new service provider. When people go to login via HTTPS, the identity provider authenticates them and then redirects them using HTTP to the home page and they get a security warning saying "The information you have entered on this page will be sent over an insecure connection and could be read by a third party." How do I configure my SP or IdP to redirect authenticated users using HTTPS?


Thanks,

   David Newswanger.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151222/87e1d753/attachment.html>