Ports need to be open for Setting up IdP

[Cantor, Scott]

> I guess it depends on the architecture/requirements of the IdP
> themselves - currently I see more than 31 IdPs around the world
> who have http:// as their entity ID and when using them there is a
> redirect to https:// service - so maybe related to load balancing
> requirements etc.

EntityIDs are not locations though. I wouldn't necessarily suggest using http://, but it has no bearing on where the service runs. The URN approach had problems, but I'm still fairly happy mine is a URN. Much easier to avoid it changing for political reasons.

-- Scott