Currently have Trusted IP-STS working using SharePoint when users use
https for the site. Site also permits anonymous access on either http or https, the issue is when sign-in from http after the user enters credentials (in the STS) they are forever trapped into endless redirects from SharePoint
(/trust) to STS default page back SharePoint (/trust).
http site has alternate access mapping, web application was provisioned for https; by extending to use seperate web applications for each http & https solve this issue?
Here what the STS does:
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Wed, 15 Sep 2010 19:14:07 GMT
<html><head><title>Working...</title></head><body><form method="POST" name="hiddenform" action="https://my.sharepoint.com/_trust/"><input type="hidden"
name="wa" value="wsignin1.0" /><input type="hidden" name="wresult" value="<trust:RequestSecurityTokenResponseCollection xmlns:trust="http://docs.oasis-open.org/ws-sx/ws-trust/200512"><trust:RequestSecurityTokenResponse
View Complete Post