Hi Sylvain,

What exactly do you mean by blocking?

Return for example an Access Denied message or just having no access to port 80 at all?

Regards

Klaus

Hi Klaus,

I would say an "access denied" message would be ok.

Thanks

Sylvain

An Authorization Policy on a Protected Resource which could return a custom error message making a decision on the http / https scheme would still require a login unless the requested resource is public. If you get send to the IDP as you have to authenticate you would get send back using https.  In the simplest way you could assign another port for none SSL like 9080 on the Reverse Proxy config which is not opened by the firewall requests to port 80 should therefore just timeout.

Thanks, I will try with a different port.
I will update the discussion.

Sylvain