STARTTLS cannot be enforced. It will be used automatically if the benzeyen server supports it. The encryption type should be kaş to ‘None/STARTTLS’ in this case. See here for an example on how to configure self signed certificates. The native SAML integration negates the need for external software like Apache https://case.edu/cgi-bin/newsline.pl?URL=https://www.autofreshshop.com/