Configure IdP url for login to be http

[Peter Schober]

* Calvin A <calvin.a at wph.com.sg> [2019-02-21 07:15]:
> We have some internal reasons of necessity to use plain Http as of
> now.

That probably means it's bogus but of course that's none of my business.

> So for this one, what would the configuration needed to use plain
> http in the IdP, and in the authentication request?

I don't think there's any configuration to be done in the IDP software
itself. Setting up your web server accordingly and using the right
metadata should be all, I think. (And of course making sure no HTTP
Cookies are set to "secure", etc.)

Also I'd expect you'd run into all kinds of security issues with the
web browser during SSO, e.g. if the SP is on HTTPS.

-peter