Client address mismatch issue with multiple instances of Azure Application Gateway

[Aseem Keskar]

Hi Shibboleth Team,

Shibboleth SSO is not working correctly hosted on Azure VM configured with two or more instances of Azure Application Gateway. It works absolutely fine with single instance of application gateway. But when we switch to two or more instance of Application Gateway, we get following error and warning.  Application should run with multiple instances of Application Gateway to meet the SLA requirement from Microsoft. Kindly note that each instance of application gateway has its own IP addresses.

<Data>Shibboleth.ServiceProvider [7952] iis_shib [default]: error during session lookup: Your IP address (xx.xx.xxx.x) does not match the address recorded at the time the session was established.</Data>

Application doesn't work as expected due to this error of IP Address mismatch even after successful login into Shibboleth. Also, please find attached log for the detail. We have taken this log from our IIS Server where Shibboleth SP is installed.
Additionally, when we click on logout link, it throws error "<Data>Shibboleth.Application : LogoutInitiator handler at duplicate Location (/Logout) will not be processed for application (default)</Data>". Please see the error detail in attached log file.
We are looking for your assistance here to fix this authentication issue for Shibboleth SSO.

Thanks and Regards,

Aseem Keskar
Group Manager - IT - WNS Global Services (P) Ltd | www.wns.com<http://www.wns.com/>
Gate No 4, Plant 10 / 11 Godrej & Boyce Complex, Pirojshanagar, LBS MargVikhroli (West), Mumbai,Maharashtra,
IP: 67219|Direct: | Mobile: +919004427356 | Email : aseem.keskar at wns.com<mailto:aseem.keskar at wns.com>

ONE WNS ONE GOAL    OUTPERFORM
________________________________
[cid:image8417a7.PNG at d98c7d79.4987f83e]<https://www.facebook.com/wnsglobalservices>

[cid:image8f23ab.PNG at 468ef803.44bbb671]<https://plus.google.com/103894804293247801422>

[cid:image6d5015.PNG at 8b84213d.4ea8155c]<http://www.linkedin.com/company/wns-global-services>

[cid:image68db3b.PNG at fecf5268.4abca7d9]<http://twitter.com/wnsholdings>

[cid:imaged5e489.PNG at d3bf55d8.41922a6d]<http://www.youtube.com/wnsglobalservices>

  Connect with WNS



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20191104/87c696b4/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image011.png
Type: image/png
Size: 1401 bytes
Desc: image011.png
URL: <http://shibboleth.net/pipermail/dev/attachments/20191104/87c696b4/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image012.png
Type: image/png
Size: 1700 bytes
Desc: image012.png
URL: <http://shibboleth.net/pipermail/dev/attachments/20191104/87c696b4/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image013.png
Type: image/png
Size: 1468 bytes
Desc: image013.png
URL: <http://shibboleth.net/pipermail/dev/attachments/20191104/87c696b4/attachment-0007.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image014.png
Type: image/png
Size: 1336 bytes
Desc: image014.png
URL: <http://shibboleth.net/pipermail/dev/attachments/20191104/87c696b4/attachment-0008.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image015.png
Type: image/png
Size: 1758 bytes
Desc: image015.png
URL: <http://shibboleth.net/pipermail/dev/attachments/20191104/87c696b4/attachment-0009.png>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: IP_Warnings.txt
URL: <http://shibboleth.net/pipermail/dev/attachments/20191104/87c696b4/attachment-0001.txt>