X-Forwarded-For on the IdP

[Stefano Zanmarchi]

Hi,
we also have a balancer in front of our IdPs that sends the client IP in the
X-Forwarded-For header.
We have solved the issue using a local Apache on every IdP server (connected
via AJP to Tomcat) and installing mod_rpaf for Apache.
This way we get the client IP in the Apache logs as well as in the IdP logs.
It has been working fine for years (10K to 60K users authenticating every day).

Best,
Stefano