Skip to main content
T
tarunt0003
October 14, 2023
Question

SAML for http (not https) only urls

  • October 14, 2023
  • 4 replies
  • 0 views

Does Appian SAML SSO work with http (not https) IDP requests.

Is it mandatory to have all the systems running under https rather than http to be compatible with saml SSO?

What is the rule?

4 replies

mathieud0001
mathieud0001
October 14, 2023

From my understanding SAML itself does not technically require https but I would argue that enabling SSL/TLS is mandatory in 2023.

In what scenario would you be running Appian without https?

    T
    tarunt0003Author
    October 14, 2023

    One of my end clients has some of its systems running on http and after checking with IdP (azure here) they suggested moving the systems  to https first to be compatible with their requests.

    Though, it's an extra overhead moving all the urls to https, but, for us it's doable.

    I just wanted to know as a general enquiry if it's mandatory to be on https which you have answered NOT, but a necessity for security purposes in this time.

    Thanks

    stefanhelzle0001
    stefanhelzle0001
    October 15, 2023

    Using encrypted connections for any communication, external AND internal is the foundation of a modern IT infrastructure. I would never compromise on that.

      Terms & ConditionsAccessibility statement