You should access SSP on https.

A SAML proxy to front of a feature weak IdP. Go forward: /simplesaml