HTTP - HTTPS rewrite with SSO enabled

Hi all,

can you please advise to handle http-https re-write in case there's SSO enabled on https?

E.g. currently I have SSO on https://mydomain.com configured with reply urlhttps://mydomain.com/saml2

If I implement the "standard" procedure to re-write http to https like https://{HTTP_HOST}/{R:1}

and try to login via http://mydomain.com I get a response from AAD that reply url is not matched in the registered application, so I guess that reply url in the request still is with http and has to be also rewriten?

Please advise...

Thanks!