Load balancing both the SP and IdP

[Cantor, Scott]

On 10/24/13, 2:34 PM, "Jesse Santana" <Jesse.Santana at csulb.edu> wrote:

>David,
> 
>Agreed.  We have not had a failure either.  I¹m only now looking into
>this because our Shibboleth environment is becoming more mission critical
>and our powers
> that be are requesting full redundancy wherever possible.

Note that if the only cost of not replicating is extra logins at times,
that isn't really much cost. There are entire campuses that use LDAP
authentication and don't do any SSO.

But that said, the biggest cost to me is tha users switching nodes
mid-login will get errors because of the login context issue (and that's
also an issue going forward with V3, Spring WebFlow uses a conversation
cookie and maintains state in RAM without a whole lot of non-realistic
work).

So a lot of the various strategies for active/passive are more about what
the disruption is for those transactions, not so much the issue of
replicating sessions.

--  Scott