SP generated AssertionConsumerServiceURL not https

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2018-10-29 14:15]:
> > No, that setting just causes requests to the handler URLs to fail
> > that are not over HTTPS.
> 
> I believe Nate's correct that it does affect the metadata
> generation. The setting affects the way the system computes the
> effective handler URL for a request, and that's probably how the
> metadata generator does its work.

Sorry. I had never noticed that behaviour (haven't been running
anything w/o forced redirect to TLS or even TLS-only for a long time)
and it doesn't seem to be documented, either.

-peter