IP Based Activation Condition

[Cantor, Scott]

> I've done some reading and it seems that if I use the AJP connector in Tomcat
> and get Apache to proxy that using mod_ajp, then apache will return the
> correct IP to Tomcat rather than the proxy address. I may be wrong but I'll
> give it a go.

Yes. I said web server log, meaning your web server. If Tomcat is acting as one, then that's your web server and that will answer the question you asked about what address the IdP sees. You seemed unsure, and that's how you find out.

-- Scott