>> its not recommended to do SSL offloading on the downstream reverse proxy(correct me if I'm wrong)
Correct, Gluu Server won't work perfectly with http.
>> reverse proxy in this case can be a load balancer appliance but basically it does SSL offloading
Yes, you can put reverse proxy infront of your SP.
However, I would always suggest you to use https everywhere you can ( even in SP ).