OpenSAML user discussion

[Chris Card <>]

> If you're starting a new topic please compose a new email instead of
> hijacking an existing thread.
apologies

> As to your question, this actually has nothing to do with SAML. It's
> browser behavior, yes it's common, and yes there is a common solution.
> It results from various endpoints not being encrypted. You can go out
> to Google and find a lot of articles and write ups about this.
Can an IDP be set up to accept SingleSignOnService redirects on both http and https urls? It's not clear to
me from the SAML metadata spec.

Chris