I'm building my FederationMetadata.xml using the great tool by Shawn Cicoria (http://stackoverflow.com/a/6535174/975520) and with some tweaks I'm near my correct solution.
I need to set:
<system.identityModel.services>
<federationConfiguration>
<cookieHandler requireSsl="false" />
<wsFederation passiveRedirectEnabled="true" issuer="<issuer>" realm="<realm>" requireHttps="false" />
</federationConfiguration>
</system.identityModel.services>
Using the tool I can't se programmatically requireSsl="false" and requireHttps="false" I get true for both of them.
And:
<certificateValidation Go to the complete details ...