IDP node stickiness without an SLB?

[Cantor, Scott]

On 1/21/14, 6:38 PM, "Christopher Bongaarts" <cab at umn.edu> wrote:
>
>Off the top of my head - not sure if this would actually work:
>
>Update the login.jsp to look at the Host: header - if it's the "virtual"
>name (idp.illinois.edu), redirect to one of the "real" names
>(idpN.illinois.edu). Otherwise leave it alone.
>
>I'm pretty sure that you only really need to sticky that page (because
>the login context stored locally to that IdP server).

I don't think so. By the time login.jsp is involved, the login context has
been created and a cookie sent back, and a switch there would break it.
Same goes for after the password is posted, I think, but I'm less sure of
that step, that may be a part of my customizations.

At least in my IdP, you have /.../SAML2/SSO/Redirect -> /idp/AuthnEngine
-> /.../SAML2/SSO/Redirect -> SP, and breaking the sticky at any stage of
that will break the login.

I think you'd have to do something like what Jim described.

-- Scott