Question on Client IP issue

[Brewer, Edward L]

To all,
I am currently using Shibboleth IdP 2.4.0 on Tomcat 6 behind a pair of F5 LTMs.  The LTM are not using SNAT but instead are passing X-Forwarded-For values.  I am able to display them in the access logs, however I am getting this occasionally

15:30:16.473 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:289] - Authentication failure, session missing during completion of profile handler
15:30:16.526 - WARN [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:211] - Client sent a cookie from address 10.152.19.245 but the cookie was issued to address 10.152.19.246

10.152.19.245 and 10.152.19.246 are the IP address of the LTM.  How can I signal to the IdP the value set for X-Forwarded-For.  BTW I am not using Apache.

Thanks,
Lee Brewer
Lee Brewer | Application Developer | Information Technology | Vanderbilt University
lee.brewer at vanderbilt.edu | phone 615.343.2802 | it.vanderbilt.edu<http://it.vanderbilt.edu/>
[Vanderbilt IT logo]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140805/9fcc1022/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 7677 bytes
Desc: image003.jpg
Url : http://shibboleth.net/pipermail/users/attachments/20140805/9fcc1022/attachment.jpg