You can configure the Service Provider end-user pages to force your servers to always process page requests using HTTPS. (ID-18509)