Shibboleth and Google

[Viitanen Viljo]

Hello,

We've had almost zero problems with shibboleth logins to google - the only problems have been related to either cookies which have been solved by instructing the user to clear cookies, or changing client ip addresses which were recently discussed in another thread. I don't know exactly how many contacts helpdesk gets with login problems, but it's very little - on average not more than a few each week. We handle daily about 15000-16000 logins to google on just one idp with one virtual machine (1 cpu, 4G memory), no load balancing.

Actually I must say setting up SAML logins to google with shibboleth has been the easiest and least problematic aspect of migrating our student email system to google. We've had plenty of other problems with the migration for sure, but they are out of scope for this list :-)

Viljo Viitanen
University of Jyväskylä


>-----Original Message-----
>From: users-bounces at shibboleth.net [mailto:users-
>bounces at shibboleth.net] On Behalf Of Ken Hammer
>Sent: 26. marraskuuta 2012 23:59
>To: shib users
>Subject: Shibboleth and Google
>
>
>Hi,
>
>  We are seeing users that are having issues with logging into Google via
>Shibboleth. Generally this is a cookie problem, but this is not always the case.
>We also have seen issues with requests being timed out waiting for the IdP to
>respond (OK, that's probably Apache, not the IdP).
>  Our setup has 6 IdPs behind a redundant pair of Ace load balancers.
>Four of the IdPs are in one
>data center and 2 (soon to be 4) are in another data center. We will putting a
>second pair of load balancers at the data center with 2 IdPs soon.
>  My question(s): Overall, how has the experience of using Shibboleth with
>Google, particularly those who use Google for their campus web mail system?
>Great? Problematic?
>Disaster?
>Are there any extra configuration steps that you needed to take to mitigate
>any issues?
>  What is the average weekly calls to the Help Desk regarding issues logging
>into Google?
>
>Thank you for taking the time to read my email, and any help, comments or
>questions are welcomed.
>
>--
>Ken Hammer
>ITS Identity and Access Management
>University Of Michigan
>Many are stubborn in pursuit of the path they have chosen, few in pursuit of
>the goal. - Fredrick Nietzsche
>
>--
>To unsubscribe from this list send an email to users-
>unsubscribe at shibboleth.net