OpenSAML user discussion

[Chris Card <>]

Hi,

we are using an IDP which has a SingleSignOnService defined in its metadata with Binding HTTP-Redirect and Location url using https.
When a browser gets redirected to this url in order to send an AuthnRequest, we get warnings from the browser e.g. from Firefox:

"Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?"

and

"You are about to leave an encrypted page. Information you send or receive from now on could easily be read by a third party."

when the SAMLResponse is posted back.

Is this a well-known issue that has a well-known solution? (apart from just disabling the warnings!)

Chris