Terracotta
Rod Widdowson
rdw at steadingsoftware.com
Thu Oct 11 06:26:45 EDT 2012
> Well, if you can forgo back channel requests (SOAP requests directly from the SP to the IDP) you could
> get by with two IdPs behind a load balancer with session affinity (sticky sessions).
Last I looked 20% of the SPs in the UK federation couldn't handle this in a conformant manner. So before you go down this route
(which has the benefit of massively simplifying your work), you should look to see whether you will end up with a workable solution
at the end.
You might also want to look at https://www.jiscmail.ac.uk/cgi-bin/webadmin?A2=ind1210&L=jisc-shibboleth&F=&S=&P=3426 which is a UK
Fed centric discussion on similar problems...
Rod
More information about the users
mailing list