IdP 3 Browser Certificate

[Rod Widdowson]

> I can't imagine this being a default.

Right, Default is:

jetty.https.port= 443
jetty.backchannel.port= 8443

Configure the browser facing stuff to the "https" port with jetty.browser.keystore.*
Configure the backchannel facing stuff to the "https" port with jetty.backchannel.keystore.*

Note that under the bonnet these two ports are not configured identically, the backchannel port is the one that expects to see a
(configured in the metadata) SP's certificate presented

R