Shibboleth in a load balancer enveiroment

Cantor, Scott cantor.2 at osu.edu
Mon Aug 11 09:44:44 EDT 2014


On 8/11/14, 9:34 AM, "Stefan Rasmusson" <rasmusson.stefan at gmail.com> wrote:

>But what I am insterested is not to cluster the Shib SP(this is for high
>availability for the SP). The service in my environment is clustered and
>I wounder how I should use Shiboleth here. Makes sense?

If you read the wiki page, it specifically talks about that case. If a
service is already clustered, then you've managed to solve the brutally
hard problem of clustering a session. Don't cluster the SP and create a
new session you have to cluster. Bridge a short-lived SP session into your
application session and you're done. As long as you accept that logout is
impossible.

-- Scott



More information about the users mailing list