Shibboleth artifact profile, load balancers and fail over

[Cantor, Scott]

On 12/13/13, 3:08 PM, "cneberg" <cneberg at gmail.com> wrote:

>Is there a way to configure artifact profile for shibboleth - when you
>are using a load balancer in front of multiple shibboleth IDP servers?

Assuming you use Terracotta, yes.

>The SSL Client auth is causing trouble getting the cert all the way back
>to the app container.

Stop terminating SSL at the load balancer.

> How do you do fail over in this mode?

I don't understand what that has to do with fail over per se.

>   Is there a way for the SP's to authenticate some other way to the
>IDP's?

Signing, yes.

-- Scott