SAML Assertion Consumer Service URL has http instead of https
See original GitHub issueHey,
I have a clean docker+Zulip setup with enabled SAMLAuthBackend behind a reverse proxy. I’ve configured SOCIAL_AUTH_SAML_ENABLED_IDPS section in settings.py and added x509cert from IdP. After that I can see server’s metadata at https://zulip.example.com/saml/metadata.xml but next Location has http scheme
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://zulip.example.com/complete/saml/" index="1"/>
that cause my browser to show warning during the SAML assertion exchange.
Could you please help find the place where I can change the scheme? Thanks!
Issue Analytics
- State:
- Created 2 years ago
- Comments:12 (7 by maintainers)
Top Results From Across the Web
SAML Assertion Consumer Service URL has http instead of https
Hey, I have a clean Zulip setup with enabled SAMLAuthBackend behind a reverse proxy. I've configured SOCIAL_AUTH_SAML_ENABLED_IDPS section ...
Read more >Relative AssertionConsumerServiceUrl redirects always to ...
AssertionConsumerServiceUrl ="~/LoginSAML.aspx"/> ... Is it possible that the URL for the current request is HTTP rather than HTTPS?
Read more >Simplesaml redirecting to HTTP instead of HTTPS
I have my HTTPS setup on the load balancer and decrypts and sends raw data to the app servers. When I hit https://www.mysite.com/sso/saml...
Read more >Shibboleth ACS URL mismatch with http and https
My ACS URL is being rewritten from https://foo.com/ to http://foo.com/ which is causing the below Exception. Microsoft.IdentityServer.
Read more >HTTPS vs HTTP for ACS URL - Okta Support
My SAML Service Provider uses HTTPS. When configuring the application in Okta, I provided the https url in the "Single Sign On URL"...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

Can you stop by chat.zulip.org? I think this will be easier debugged interactively with @mateuszmandera there.
Hmm no, I don’t think anything happened with this in chat.zulip.org. @intelligentops Have you been able to find a solution to this?