Load Balancing and Sticky Sessions

[Manuel Haim]

Hi Scott,

Am 27.08.2013 02:54, schrieb Cantor, Scott:
> Then my suggestion would be to look into my contributed login handler and
> the other plugins (see the StatelessClustering page I wrote up).

just a question: On the stateless clustering page [1] you write:

"The login context is still persisted using server-side state which must
be present through the process beginning with the receipt of an
AuthnRequest and ending with the issuance of a response.  There must be
either short session stickiness to associate a client with a single node
for however long the login process may take(~5 minutes), or replication
of the IdP session object itself using a stateful clustering mechanism."

This means that even with IdP stateless clustering, you need to stick at
least a few minutes to the user's IP address or to the
"_idp_authn_lc_key" cookie, right?

-Manuel

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPStatelessClustering