* Nate Klingenstein <ndk at signet.id> [2018-10-26 22:26]: > or you can enable handlerSSL="true" in the Sessions element, which > will force all AssertionConsumerService endpoint generation to use > the HTTPS scheme instead. No, that setting just causes requests to the handler URLs to fail that are not over HTTPS. -peter