<div dir="ltr">ahhhh, yes my understanding was that the metadata file was what impacted the location the post assertion comes to, I see how that is incorrect now. <div><br></div><div>One quick issue now is that with this URL schema, set to `ShibURLScheme https` I get the post back to my host and it is specifying manually port 80, like below. </div><div><br></div><div>`opensaml::BindingException at (https://${myHost}:80/auth/shib/SAML2/POST)`</div><div><br></div><div>How is port determined? And how can we force it to be 443?</div><div><br></div><div>Thanks again for the help. <br><div><br></div><div><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Mar 4, 2015 at 11:20 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 3/4/15, 7:09 PM, "Spencer Gaddy" <<a href="mailto:recneps@gmail.com">recneps@gmail.com</a>> wrote:<br>
<br>
<br>
<br>
>Hi, I am working on a Shibboleth native 2.0 SP setup and having a bit of<br>
>trouble after setting up all my load balancers and url rewrite rules.<br>
<br>
</span>Because you haven't actually done that step fully.<br>
<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPNoSSL" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPNoSSL</a><br>
<span class=""><br>
>Essentially we are getting assertions back to our SP endpoint over http,<br>
>but we do not accept http on our front end load balancer.<br>
<br>
</span>No, that's not the case. You're getting them over http physically and your<br>
web server does not know that it's been virtualized and should be treating<br>
them as https.<br>
<span class=""><br>
>The odd thing about this is that we have specifically set the endpoint as<br>
>https in our metadata file. As per below.<br>
<br>
</span>Metadata does not control how web servers interpret their requests and<br>
report URLs.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>