In ‘mixed’ mode, if a user accesses the server via HTTP, it will switch to HTTPS for the login only, then revert to HTTP for normal session traffic. If they access via HTTPS, they will stay on HTTPS. In ‘redirect’ mode, if a user accesses the server via HTTP, it will switch to HTTPS and they will stay on HTTPS for their entire session.