Now enforcing HTTPS between the client and the IDP.