Question on IDP session randomness (low entrophy)

[Cantor, Scott]

On 12/11/12 6:29 PM, "Anand Somani" <meatforums at gmail.com> wrote:
>
>If I have no clustering between my multiple IDP instances (want to treat
>them as stateless), do I risk a login failure if the login happens on 1
>instance and the SAMLAssertion generation happens on another (due to
>redirect)?

Yes. You cannot do this without a sticky load balancer. If you want
something else, you need Terracotta or your own storage service.

-- Scott