1 Reply Latest reply on Jul 17, 2013 4:15 PM by chadbrogan

    Picketlink SP redirects to http:// instead of https://

    chadbrogan
    chadbrogan Jul 16, 2013 6:21 PM

      I have picketlink 2.1.6 running on Tomcat 7.0.40. We are using ADFSv2 as an IDP. Everything works fine until the service provider redirects back to the originally requested URL. Instead of redirecting to https://blah.com it returns http://blah.com.

       

      We have a similar setup (same picketlink.xml and ADFS configuration) on another server and everything appears to works fine. Why would picketlink redirect to http instead of https? Here is our picketlink.xml:

       

      <?xml version="1.0" encoding="UTF-8"?>

      <PicketLink xmlns="urn:picketlink:identity-federation:config:2.1">

          <PicketLinkSP xmlns="urn:picketlink:identity-federation:config:2.1"

              BindingType="REDIRECT"

              IDPUserPostBinding="true"

              SupportsSignatures="true">

       

       

              <IdentityURL>https://sso.blah.com/</IdentityURL>

              <ServiceURL>https://app.blah.com/</ServiceURL>

                      <Trust>

                              <Domains>blah.com</Domains>

                      </Trust>

              <KeyProvider ClassName="org.picketlink.identity.federation.core.impl.KeyStoreKeyManager">

       

       

                  <Auth Key="KeyStoreURL" Value="blah.keystore" />

                  <Auth Key="KeyStorePass" Value="pass" />

                  <Auth Key="SigningKeyPass" Value="pass" />

                  <Auth Key="SigningKeyAlias" Value="tomcat" />

       

       

                  <ValidatingAlias Key="sso.blah.com" Value="tomcat" />

       

       

              </KeyProvider>

          </PicketLinkSP>

       

       

          <Handlers xmlns="urn:picketlink:identity-federation:handler:config:2.1">

              <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2IssuerTrustHandler" />

              <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler" />

              <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler">

                      <Option Key="CLOCK_SKEW_MILIS" Value="60000" />

              </Handler>

              <Handler class="org.picketlink.identity.federation.web.handlers.saml2.RolesGenerationHandler" />

              <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AttributeHandler" />

           </Handlers>

      </PicketLink>