Idp behind SSL endpoint without AJP

[Peter Schober]

* Andrej Gregorka <Andrej.Gregorka at ixtlan-team.si> [2015-09-21 11:05]:
> 10:09:40.817 - ERROR
> [org.opensaml.common.binding.decoding.BaseSAMLMessageDecoder:215] -
> SAML message intended destination endpoint
> 'https://domain/idp/profile/SAML2/Redirect/SSO' did not match the
> recipient endpoint 'http:// domain /idp/profile/SAML2/Redirect/SSO'
[...]
> How can I get the IDP working behind proxy using the http connection?

Assuming you're running Tomcat -- you don't mention the type of
software you have misconfigured:

http://tomcat.apache.org/tomcat-8.0-doc/config/http.html#Proxy_Support
http://tomcat.apache.org/tomcat-8.0-doc/config/http.html#SSL_Support

Try this:
  "You will also need to set the scheme and secure attributes to the
   values https and true respectively, to pass correct information to the
   servlets."
That should work without setting SSLEnabled, I would hope.
-peter