Terracotta

Rod Widdowson rdw at steadingsoftware.com
Thu Oct 11 06:26:45 EDT 2012


> Well, if you can forgo back channel requests (SOAP requests directly from the SP to the IDP) you could
> get by with two IdPs behind a load balancer with session affinity (sticky sessions).

Last I looked 20% of the SPs in the UK federation couldn't handle this in a conformant manner.  So before you go down this route
(which has the benefit of massively simplifying your work), you should look to see whether you will end up with a workable solution
at the end.

You might also want to look at https://www.jiscmail.ac.uk/cgi-bin/webadmin?A2=ind1210&L=jisc-shibboleth&F=&S=&P=3426 which is a UK
Fed centric discussion on similar problems...

Rod




More information about the users mailing list