My first thought would be to double check your SSO config to see where it is directing users, as well as what origins it accepts. Make sure everything within the SSO config is using https://. It’s also possible that this is an Nginx issue. Going to be hard to debug here with multiple variables…