2.1 Transport

  • Article

The GetProxyTrustConfiguration request, LsRequestSecurityToken request, RequestSecurityTokenWithToken request, and LsRequestSecurityTokenWithCookie request messages MUST be transmitted using the HTTP POST method; they MUST NOT be transmitted using the GET method.

The client role and server role MUST use the HTTPS URL scheme to identify the server endpoints for processing the GetProxyTrustConfiguration request, LsRequestSecurityToken request, RequestSecurityTokenWithToken request, and LsRequestSecurityTokenWithCookie request messages.