diff --git a/mdx/incommon/edugain-policy.xml b/mdx/incommon/edugain-policy.xml
index c89fa1bf..07397f29 100644
--- a/mdx/incommon/edugain-policy.xml
+++ b/mdx/incommon/edugain-policy.xml
@@ -375,6 +375,14 @@
                 <!-- Sub-rule t. -->
                 <ref bean="check_saml2meta"/>
 
+                <!--
+                    Sub-rule u.
+
+                    Mark SP entities with an endpoint location that
+                    is not HTTPS-protected.
+                -->
+                <ref bean="check_sp_tls"/>
+
                 <!--
                     *************************************
                     ***                               ***
@@ -408,7 +416,6 @@
                             <ref bean="check_saml2int"/>
                             <ref bean="check_saml_strings"/>
                             <ref bean="check_shibboleth"/>
-                            <ref bean="check_sp_tls"/>
                             <ref bean="check_uk_algorithms"/>
                             <ref bean="check_uk_trust"/>
                             <ref bean="check_uk_wayf"/>