On 8/27/13 2:55 AM, "Manuel Haim" <haim at hrz.uni-marburg.de> wrote: >This means that even with IdP stateless clustering, you need to stick at >least a few minutes to the user's IP address or to the >"_idp_authn_lc_key" cookie, right? Yes. -- Scott