IDP node stickiness without an SLB?
Jim Fox
fox at washington.edu
Tue Jan 21 17:52:26 EST 2014
>
> Can anyone make any suggestions of how we might, once a user hits node 1 or node 2, keep them going back to that node until they’re logged in and
> returning to the SP? I see no easy way to, say, put an absolute URL in place of /idp for all of the relative URLs presented by the IDP.
>
We also have a load balancer that doesn't know sticky. We use
Apache and mod_proxy to create artificial stickyness. A short
lived cookie identifies the host where a user first arrives. If a
subsequent request lands on the wrong host it is proxied to the
right one. If this might work for you lookup idpproxyclustering
on the shib wiki.
Jim
More information about the users
mailing list